Festo vulnerabilities

Products

• Controller Cecc-x-m1 Firmware 5
• Controller Cecc-x-m1-mv Firmware 5
• Controller Cecc-x-m1-mv-s1 Firmware 5
• Controller Cecc-x-m1-ys-l1 Firmware 5
• Controller Cecc-x-m1-ys-l2 Firmware 5
• Controller Cecc-x-m1-y-yjkp Firmware 5
• Cecx-x-c1 Modular Master Controller With Codesys 4
• Cecx-x-m1 Modular Controller With Codesys And Softmotion 4
• Controller Cecc-x-m1 (4407603) 4
• Controller Cecc-x-m1 (8124922) 4
• Controller Cecc-x-m1-mv (4407605) 4
• Controller Cecc-x-m1-mv (8124923) 4
• Controller Cecc-x-m1-mv-s1 (4407606) 4
• Controller Cecc-x-m1-mv-s1 (8124924) 4
• Controller Cecc-x-m1-ys-l1 (8082793) 4
• Controller Cecc-x-m1-ys-l2 (8082794) 4
• Controller Cecc-x-m1-y-yjkp (4803891) 4
• Servo Press Kit Yjkp- (8058596) 4
• Servo Press Kit Yjkp (8077950) 4
• Servo Press Kit Yjkp- Firmware 4
• Servo Press Kit Yjkp Firmware 4
• Cecx-x-c1 Modular Master Controller 2
• Cecx-x-m1 Modular Controller 2
• Controller Cecc-d Firmware 2
• Controller Cecc-lk Firmware 2
• Controller Cecc-s Firmware 2

Newest

• festo mse6-c2m-5000-fb36-d-m-rg-bar-m12l4-agd, mse6-c2m-5000-fb36-d-m-rg-bar-m12l5-agd, mse6-c2m-5000-fb43-d-m-rg-bar-m12l4-mq1-agd +9 more +11 more Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions CVE-2023-3634 8.8 HighApril 16, 2026
• codesys v3 containing the cmpusermgr, control for beaglebone, control for empc-a\/imx6 +62 more +64 more CODESYS V3 prone to Inadequate Password Hashing CVE-2020-12069 7.8 HighDecember 26, 2022
• festo bus module cpx-e-ep firmware, bus node cpx-fb32 firmware, bus node cpx-fb33 firmware +151 more +153 more Incomplete Documentation of remote functions in FESTO products. CVE-2022-3270 9.8 CriticalDecember 1, 2022
• festo control block cpx-cec-c1 (no. 567347), control block cpx-cmxx (no. 555667), cpx-cec-c1 firmware +1 more +3 more Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function CVE-2022-3079 7.5 HighSeptember 20, 2022
• festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 more FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability CVE-2022-30311 9.8 CriticalJune 13, 2022
• festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 more FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability CVE-2022-30310 9.8 CriticalJune 13, 2022
• festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 more FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability CVE-2022-30309 9.8 CriticalJune 13, 2022
• festo controller cecc-x-m1 (4407603), controller cecc-x-m1 (8124922), controller cecc-x-m1-mv (4407605) +16 more +18 more FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability CVE-2022-30308 9.8 CriticalJune 13, 2022
• festo cecx-x-c1 modular master controller with codesys, cecx-x-c1 modular master controller, cecx-x-m1 modular controller with codesys and softmotion +3 more +5 more Festo CECX-X-(C1/M1) Controller Improper Authentication CVE-2014-0769 9.3 April 25, 2014
• festo cecx-x-c1 modular master controller with codesys, cecx-x-c1 modular master controller, softmotion3d softmotion +3 more +5 more Festo CECX-X-(C1/M1) Controller Improper Authentication CVE-2014-0760 9.3 April 25, 2014
• 3s-smart software solutions codesys, codesys control rte, codesys control runtime embedded +4 more +6 more 3S CoDeSys Relative Path Traversal CVE-2012-6069 10.0 CriticalJanuary 21, 2013
• 3s-smart software solutions codesys, 3s-software codesys runtime system, 3s-smart software solutions codesys control rte +4 more +6 more 3S CoDeSys Improper Access Control CVE-2012-6068 9.8 CriticalJanuary 21, 2013