Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:17:23 +0000 CVE-2022-30308 — FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability https://cve.radiocsirt.org/vuln/cve-2022-30308 <p><strong>Affected:</strong> Festo Controller CECC-X-M1 (4407603), Festo Controller CECC-X-M1 (8124922), Festo Controller CECC-X-M1-MV (4407605), Festo Controller CECC-X-M1-MV (8124923), Festo Controller CECC-X-M1-MV-S1 (4407606), Festo Controller CECC-X-M1-MV-S1 (8124924), Festo Controller CECC-X-M1-YS-L1 (8082793), Festo Controller CECC-X-M1-YS-L2 (8082794), Festo Controller CECC-X-M1-Y-YJKP (4803891), Festo Servo Press Kit YJKP (8077950) and 1 more</p> <p>In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint &#34;cecc-x-web-viewer-request-on&#34; POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.</p> <p><strong>Affected:</strong> Festo Controller CECC-X-M1 (4407603), Festo Controller CECC-X-M1 (8124922), Festo Controller CECC-X-M1-MV (4407605), Festo Controller CECC-X-M1-MV (8124923), Festo Controller CECC-X-M1-MV-S1 (4407606), Festo Controller CECC-X-M1-MV-S1 (8124924), Festo Controller CECC-X-M1-YS-L1 (8082793), Festo Controller CECC-X-M1-YS-L2 (8082794), Festo Controller CECC-X-M1-Y-YJKP (4803891), Festo Servo Press Kit YJKP (8077950) and 1 more</p> <p>In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint &#34;cecc-x-web-viewer-request-on&#34; POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.</p> https://cve.radiocsirt.org/vuln/cve-2022-30308