Overview
- Description
- Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.
- Source
- info@cert.vde.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
Weaknesses
- info@cert.vde.com
- CWE-269
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:festo:cpx-cmxx_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A734858-6728-452C-BEF4-9C638380180D",
"versionEndIncluding": "2.0.12"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:festo:cpx-cmxx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "467CCB2B-2FCC-4885-9CD3-52F312FD20B8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:festo:cpx-cec-c1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1F679EE-D2D0-496D-AB98-70E99F285358",
"versionEndIncluding": "1.2.34"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:festo:cpx-cec-c1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "58B42CEE-8A72-4C1D-9951-7E147282718A"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]