Controller Cecc X M1 Mv S1 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:festo:controller_cecc-x-m1-mv-s1_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Festo (6d5b1b1f-978d-5d00-8dba-7f1d7eb96f90) |
|---|---|
| Product | Controller Cecc X M1 Mv S1 Firmware (06e31bef-a7c6-5731-9d2a-a9c52b52e7bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30311 |
vulnerable | 2026-06-08 05:43:37.914515 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:24.763Z
Updated: 2024-09-16T23:41:46.855Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30310 |
vulnerable | 2026-06-08 05:43:37.909646 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:23.105Z
Updated: 2024-11-20T15:21:04.526Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30309 |
vulnerable | 2026-06-08 05:43:37.907210 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:21.634Z
Updated: 2024-09-16T22:15:41.158Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30308 |
vulnerable | 2026-06-08 05:43:37.898568 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:20.015Z
Updated: 2024-09-16T22:40:02.831Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.