https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-3270.htmlhttps://patchthecve.com/cve/CVE-2022-3270.htmlWed, 17 Jun 2026 04:59:11 +0000CRITICAL 9.8: In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability. https://patchthecve.com/cve/CVE-2022-3079.htmlhttps://patchthecve.com/cve/CVE-2022-3079.htmlWed, 17 Jun 2026 04:58:47 +0000HIGH 7.5: Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.https://patchthecve.com/cve/CVE-2022-30311.htmlhttps://patchthecve.com/cve/CVE-2022-30311.htmlWed, 17 Jun 2026 04:43:28 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.https://patchthecve.com/cve/CVE-2022-30310.htmlhttps://patchthecve.com/cve/CVE-2022-30310.htmlWed, 17 Jun 2026 04:43:27 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.https://patchthecve.com/cve/CVE-2022-30309.htmlhttps://patchthecve.com/cve/CVE-2022-30309.htmlWed, 17 Jun 2026 04:43:27 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.https://patchthecve.com/cve/CVE-2022-30308.htmlhttps://patchthecve.com/cve/CVE-2022-30308.htmlWed, 17 Jun 2026 04:43:27 +0000CRITICAL 9.8: In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.