Most recent entries from all

EUVD-2026-174519

fkie_cve-2022-30308

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

FSA-202201 — Festo: CECC-X-M1 - command injection vulnerabilities

The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability. Update A, 2022-07-05 Remediation has been updated. Fixed firmwares are now available.

GHSA-q9r7-jm84-gwh8

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesnâ€™t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

gsd-2022-30308

ICSA-25-182-04 — FESTO Hardware Controller, Hardware Servo Press Kit