https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:32:08.912846+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-246361 EUVD-2026-246361 2026-10-02T15:32:08.980310+00:00 EUVD-2026-246361 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0769 fkie_cve-2014-0769 2026-10-02T15:32:08.980354+00:00

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.

 https://cve.radiocsirt.org/vuln/ghsa-q52x-cg29-xrxr GHSA-q52x-cg29-xrxr 2026-10-02T15:32:08.980401+00:00

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.

 https://cve.radiocsirt.org/vuln/gsd-2014-0769 gsd-2014-0769 2026-10-02T15:32:08.980432+00:00 gsd-2014-0769 https://cve.radiocsirt.org/vuln/icsa-14-084-01 ICSA-14-084-01 — Festo CECX-X-(C1/M1) Controller Vulnerabilities 2026-10-02T15:32:08.980450+00:00

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001. The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to (1) execute commands via the command-line interface in the TCP listener service or (2) transfer files via requests to the TCP listener service. Directory traversal vulnerability in the Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x allows remote attackers to read, overwrite, or create arbitrary files via a .. (dot dot) in a request to the TCP listener service.