Festo Servo Press Kit YJKP
Approved changes feed: RSS · Atom
cpe:2.3:h:festo:servo_press_kit_yjkp:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Festo (6d5b1b1f-978d-5d00-8dba-7f1d7eb96f90) |
|---|---|
| Product | Servo Press Kit Yjkp (4eb36025-d0ab-5cf4-a28f-0f49bdaf466a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30311 |
not_vulnerable | 2026-06-08 05:43:37.915055 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:24.763Z
Updated: 2024-09-16T23:41:46.855Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30310 |
not_vulnerable | 2026-06-08 05:43:37.909979 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:23.105Z
Updated: 2024-11-20T15:21:04.526Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30309 |
not_vulnerable | 2026-06-08 05:43:37.907552 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:21.634Z
Updated: 2024-09-16T22:15:41.158Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30308 |
not_vulnerable | 2026-06-08 05:43:37.904579 |
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CRITICAL (9.8)
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
Published: 2022-06-13T13:45:20.015Z
Updated: 2024-09-16T22:40:02.831Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.