{"id":"CVE-2022-3270","aliases":["EUVD-2022-42670","GHSA-v7vr-mf26-79cm"],"status":"published","title":"Incomplete Documentation of remote functions in FESTO products.","description":"In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented  protocol which could lead to a complete loss of confidentiality, integrity and availability.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01116,"percentile":0.66294,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1059"],"published":"2022-12-01T10:27:52Z","modified":"2026-06-17T04:59:11Z","products":[{"vendor":"festo","product":"bus_module_cpx-e-ep_firmware"},{"vendor":"festo","product":"bus_node_cpx-fb32_firmware"},{"vendor":"festo","product":"bus_node_cpx-fb33_firmware"},{"vendor":"festo","product":"bus_node_cpx-fb36_firmware"},{"vendor":"festo","product":"bus_node_cpx-fb37_firmware"},{"vendor":"festo","product":"bus_node_cpx-fb39_firmware"},{"vendor":"festo","product":"bus_node_cpx-fb40_firmware"},{"vendor":"festo","product":"bus_node_cpx-fb43_firmware"},{"vendor":"festo","product":"bus_node_cpx-m-fb34_firmware"},{"vendor":"festo","product":"bus_node_cpx-m-fb35_firmware"},{"vendor":"festo","product":"bus_node_cpx-m-fb44_firmware"},{"vendor":"festo","product":"bus_node_cpx-m-fb45_firmware"},{"vendor":"festo","product":"bus_node_cteu-ep_firmware"},{"vendor":"festo","product":"bus_node_cteu-pn-ex1c_firmware"},{"vendor":"festo","product":"bus_node_cteu-pn_firmware"},{"vendor":"festo","product":"camera_system_chb-c-n_firmware"},{"vendor":"festo","product":"cecx-x-c1_modular_master_controller_firmware"},{"vendor":"festo","product":"cecx-x-m1_modular_controller_firmware"},{"vendor":"festo","product":"compact_vision_system_sboc-c_firmware"},{"vendor":"festo","product":"compact_vision_system_sboc-m_firmware"},{"vendor":"festo","product":"compact_vision_system_sboc-q_firmware"},{"vendor":"festo","product":"compact_vision_system_sboi-c_firmware"},{"vendor":"festo","product":"compact_vision_system_sboi-m_firmware"},{"vendor":"festo","product":"compact_vision_system_sboi-q_firmware"},{"vendor":"festo","product":"control block cpx-cec-c1"},{"vendor":"festo","product":"control block cpx-cmxx"},{"vendor":"festo","product":"control_block_cpx-cec-c1-v3_firmware"},{"vendor":"festo","product":"control_block_cpx-cec-c1_firmware"},{"vendor":"festo","product":"control_block_cpx-cec-m1-v3_firmware"},{"vendor":"festo","product":"control_block_cpx-cec-m1_firmware"},{"vendor":"festo","product":"control_block_cpx-cec-s1-v3_firmware"},{"vendor":"festo","product":"control_block_cpx-cec_firmware"},{"vendor":"festo","product":"control_block_cpx-cmxx_firmware"},{"vendor":"festo","product":"control_block_cpx-fec-1-ie_firmware"},{"vendor":"festo","product":"controller_cecc-d-ba_firmware"},{"vendor":"festo","product":"controller_cecc-d_firmware"},{"vendor":"festo","product":"controller_cecc-lk_firmware"},{"vendor":"festo","product":"controller_cecc-s_firmware"},{"vendor":"festo","product":"controller_cecc-x-m1-mv-s1_firmware"},{"vendor":"festo","product":"controller_cecc-x-m1-mv_firmware"},{"vendor":"festo","product":"controller_cecc-x-m1-y-yjkp_firmware"},{"vendor":"festo","product":"controller_cecc-x-m1-ys-l1_firmware"},{"vendor":"festo","product":"controller_cecc-x-m1-ys-l2_firmware"},{"vendor":"festo","product":"controller_cecc-x-m1_firmware"},{"vendor":"festo","product":"controller_cmxh-st2-c5-7-diop_firmware"},{"vendor":"festo","product":"controller_sbrd-q_firmware"},{"vendor":"festo","product":"ethernet\\/ip_interface_cpx-ap-i-ep-m12_firmware"},{"vendor":"festo","product":"ethernet\\/ip_interface_cpx-ap-i-pn-m12_firmware"},{"vendor":"festo","product":"gateway_cpx-iot_firmware"},{"vendor":"festo","product":"integrated_drive_emca-ec-67-m-1te-ep_firmware"},{"vendor":"festo","product":"integrated_drive_emca-ec-67_firmware"},{"vendor":"festo","product":"motor_controller_cmmo-st-c5-1-dion_firmware"},{"vendor":"festo","product":"motor_controller_cmmo-st-c5-1-diop_firmware"},{"vendor":"festo","product":"motor_controller_cmmo-st-c5-1-lkp_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c10-11a-p3-m0_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c10-11a-p3-m3_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c15-11a-p3-m3_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c2-3a-m0_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c2-3a-m3_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c5-11a-p3-m0_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c5-11a-p3-m3_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c5-3a-m0_firmware"},{"vendor":"festo","product":"motor_controller_cmmp-as-c5-3a-m3_firmware"},{"vendor":"festo","product":"operator_unit_cdpx-x-a-s-10_firmware"},{"vendor":"festo","product":"operator_unit_cdpx-x-a-w-13_firmware"},{"vendor":"festo","product":"operator_unit_cdpx-x-a-w-4_firmware"},{"vendor":"festo","product":"operator_unit_cdpx-x-a-w-7_firmware"},{"vendor":"festo","product":"planar_surface_gantry_excm-30_firmware"},{"vendor":"festo","product":"planar_surface_gantry_excm-40_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c12-11a-p3-ec-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c12-11a-p3-ep-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c12-11a-p3-mp-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c12-11a-p3-pn-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-11a-p3-ec-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-11a-p3-ep-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-11a-p3-mp-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-11a-p3-pn-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-3a-ec-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-3a-ep-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-3a-mp-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c2-3a-pn-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c3-11a-p3-ec-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c3-11a-p3-ep-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c3-11a-p3-mp-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c3-11a-p3-pn-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c4-3a-ec-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c4-3a-ep-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c4-3a-mp-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c4-3a-pn-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c5-11a-p3-ec-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c5-11a-p3-ep-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c5-11a-p3-mp-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c5-11a-p3-pn-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c7-11a-p3-ec-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c7-11a-p3-ep-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c7-11a-p3-mp-s1_firmware"},{"vendor":"festo","product":"servo_cmmt-as-c7-11a-p3-pn-s1_firmware"},{"vendor":"festo","product":"servo_drive_cmmt-st-c8-1c-ep-s0_firmware"},{"vendor":"festo","product":"servo_drive_cmmt-st-c8-1c-pn-s0_firmware"},{"vendor":"festo","product":"vtem-s1-27_firmware"},{"vendor":"festo","product":"vtem-s1-c_firmware"},{"vendor":"festo se","product":"bus module cpx-e-ep"},{"vendor":"festo se","product":"bus module cpx-e-pn"},{"vendor":"festo se","product":"bus node cpx-fb32"},{"vendor":"festo se","product":"bus node cpx-fb33"},{"vendor":"festo se","product":"bus node cpx-fb36"},{"vendor":"festo se","product":"bus node cpx-fb37"},{"vendor":"festo se","product":"bus node cpx-fb39"},{"vendor":"festo se","product":"bus node cpx-fb40"},{"vendor":"festo se","product":"bus node cpx-fb43"},{"vendor":"festo se","product":"bus node cpx-m-fb34"},{"vendor":"festo se","product":"bus node cpx-m-fb35"},{"vendor":"festo se","product":"bus node cpx-m-fb44"},{"vendor":"festo se","product":"bus node cpx-m-fb45"},{"vendor":"festo se","product":"bus node cteu-ep"},{"vendor":"festo se","product":"bus node cteu-pn"},{"vendor":"festo se","product":"bus node cteu-pn-ex1c"},{"vendor":"festo se","product":"camera system chb-c-n"},{"vendor":"festo se","product":"compact vision system sbo*-c-*"},{"vendor":"festo se","product":"compact vision system sbo*-m-*"},{"vendor":"festo se","product":"compact vision system sbo*-q-*"},{"vendor":"festo se","product":"control block cpx-cec"},{"vendor":"festo se","product":"control block cpx-cec-c1"},{"vendor":"festo se","product":"control block cpx-cec-c1-v3"},{"vendor":"festo se","product":"control block cpx-cec-m1"},{"vendor":"festo se","product":"control block cpx-cec-m1-v3"},{"vendor":"festo se","product":"control block cpx-cec-s1-v3"},{"vendor":"festo se","product":"control block cpx-cmxx"},{"vendor":"festo se","product":"control block cpx-fec-1-ie"},{"vendor":"festo se","product":"controller cecc-d"},{"vendor":"festo se","product":"controller cecc-d-ba"},{"vendor":"festo se","product":"controller cecc-lk"},{"vendor":"festo se","product":"controller cecc-s"},{"vendor":"festo se","product":"controller cecc-x-*"},{"vendor":"festo se","product":"controller cecx-x-c1"},{"vendor":"festo se","product":"controller cecx-x-m1"},{"vendor":"festo se","product":"controller cmxh-st2-c5-7-diop"},{"vendor":"festo se","product":"controller cpx-e-cec-*"},{"vendor":"festo se","product":"controller sbrd-q"},{"vendor":"festo se","product":"ethernet/ip interface cpx-ap-i-ep-m12"},{"vendor":"festo se","product":"ethernet/ip interface cpx-ap-i-pn-m12"},{"vendor":"festo se","product":"gateway cpx-iot"},{"vendor":"festo se","product":"integrated drive emca-ec-67-*"},{"vendor":"festo se","product":"motor controller cmmo-st-c5-1-dion"},{"vendor":"festo se","product":"motor controller cmmo-st-c5-1-diop"},{"vendor":"festo se","product":"motor controller cmmo-st-c5-1-lkp"},{"vendor":"festo se","product":"motor controller cmmp-as-*"},{"vendor":"festo se","product":"motor controller cmmt-as-*"},{"vendor":"festo se","product":"operator unit cdpx-x-a-s-10"},{"vendor":"festo se","product":"operator unit cdpx-x-a-w-13"},{"vendor":"festo se","product":"operator unit cdpx-x-a-w-4"},{"vendor":"festo se","product":"operator unit cdpx-x-a-w-7"},{"vendor":"festo se","product":"planar surface gantry excm-*"},{"vendor":"festo se","product":"servo drive cmmt-st-c8-1c-ep-s0"},{"vendor":"festo se","product":"servo drive cmmt-st-c8-1c-pn-s0"},{"vendor":"festo se","product":"vtem-s1-*"}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-041/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3270"},{"url":"https://github.com/advisories/GHSA-v7vr-mf26-79cm"}],"sources":{"cve":[{"id":"CVE-2022-3270","title":"Incomplete Documentation of remote functions in FESTO products.","description":"In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented  protocol which could lead to a complete loss of confidentiality, integrity and availability.\n","status":"published","published":"2022-12-01T10:27:52.434Z","modified":"2025-04-24T20:05:32.864Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-1059"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-42670","description":"In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented  protocol which could lead to a complete loss of confidentiality, integrity and availability.\n","status":"published","published":"2022-12-01T10:27:52Z","modified":"2025-04-24T20:05:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:03.523577Z"}],"ghsa":[{"id":"GHSA-v7vr-mf26-79cm","title":"In multiple products by Festo a remote unauthenticated attacker could use functions of an...","description":"In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.","status":"published","published":"2022-12-01T12:30:25Z","modified":"2023-01-31T05:03:00Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-1059"],"updated_at":"2026-11-02T14:48:23.185743Z"}],"nvd":[{"id":"CVE-2022-3270","description":"In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented  protocol which could lead to a complete loss of confidentiality, integrity and availability.\n","status":"published","published":"2022-12-01T11:15:10.64Z","modified":"2026-06-17T04:59:11.8Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-1059"],"updated_at":"2026-11-02T14:07:32.827264Z"}]}}