Most recent entries from all

EUVD-2026-202846

fkie_cve-2022-30310

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

FSA-202201 — Festo: CECC-X-M1 - command injection vulnerabilities

The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability. Update A, 2022-07-05 Remediation has been updated. Fixed firmwares are now available.

GHSA-xm7p-h8qq-9g6j

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesnâ€™t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

gsd-2022-30310

ICSA-25-182-04 — FESTO Hardware Controller, Hardware Servo Press Kit