festo vulnerabilities

Recent CVEs affecting festo products. 6 tracked.

festo has 6 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-12-01. Highest priority: CVE-2022-30311 (score 61/100).

CVE-2022-3270 CRITICAL 9.8 MITIGATE MITIGATE In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protoc
CVE-2022-3079 HIGH 7.5 UPGRADE UPGRADE Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to criti
CVE-2022-30311 CRITICAL 9.8 UPGRADE UPGRADE In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request"
CVE-2022-30310 CRITICAL 9.8 UPGRADE UPGRADE In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request"
CVE-2022-30309 CRITICAL 9.8 UPGRADE UPGRADE In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-reques
CVE-2022-30308 CRITICAL 9.8 UPGRADE UPGRADE In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-reques

FAQ

How do I fix festo vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is festo being exploited right now?

None of the tracked festo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which festo CVE should I patch first?

CVE-2022-30311 currently ranks highest (61/100): In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" .

Products

RSS feed for festo · ← Back to latest CVEs