Vulnerability-Lookup

FSA-202201

Vulnerability from csaf_festosecokg - Published: 2022-07-06 07:00 - Updated: 2025-06-23 08:00

Summary

Festo: CECC-X-M1 - command injection vulnerabilities

Notes

Summary: The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability. Update A, 2022-07-05 Remediation has been updated. Fixed firmwares are now available.

Impact: Any person who is able to gain access to the webserver would be able to run arbitrary system commands on the device with root privileges.

Remediation: Please update to firmware versions as described below: | Product | Product Details | Fixed in version | |-----------------------------|-----------------------------------------------------------|------------------| | Controller CECC-X-M1 | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1 | 3.8.18 | | Controller CECC-X-M1 | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1 | 4.0.18 | | Controller CECC-X-M1-MV | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV | 3.8.18 | | Controller CECC-X-M1-MV | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV | 4.0.18 | | Controller CECC-X-M1-MVS1 | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 | 3.8.18 | | Controller CECC-X-M1-MVS1 | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 | 4.0.18 | | Controller CECC-X-M1-YYJKP | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP | 3.8.18 | | Controller CECC-X-M1-YSL1 | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 | 3.8.18 | | Controller CECC-X-M1-YSL2 | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 | 3.8.18 | | Servo Press Kit YJKP | Festo:Partnumber:8077950 Festo:Ordercode:YJKP | 3.8.18 | | Servo Press Kit YJKP | Festo:Partnumber:8058596 Festo:Ordercode:YJKP | 3.8.18 |

General recommendation: Currently, Festo has not identified any specific workarounds for this vulnerability. As part of a security strategy, Festo recommends the following general defense measures to reduce the risk of exploits: - Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from outside - Use firewalls to protect and separate the control system network from other networks - Use VPN (Virtual Private Networks) tunnels if remote access is required - Activate and apply user management and password features - Use encrypted communication links - Limit the access to both development and control system by physical means, operating system features, etc. - Protect both development and control system by using up to date virus detecting solutions Festo strongly recommends to minimize and protect network access to connected devices with state of the art techniques and processes. For a secure operation follow the recommendations in the product manuals.

CVE-2022-30311

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn't check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Vendor Fix Please update to firmware versions as described below: | Product | Product Details | Fixed in version | |-----------------------------|-----------------------------------------------------------|------------------| | Controller CECC-X-M1 | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1 | 3.8.18 | | Controller CECC-X-M1 | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1 | 4.0.18 | | Controller CECC-X-M1-MV | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV | 3.8.18 | | Controller CECC-X-M1-MV | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV | 4.0.18 | | Controller CECC-X-M1-MVS1 | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 | 3.8.18 | | Controller CECC-X-M1-MVS1 | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 | 4.0.18 | | Controller CECC-X-M1-YYJKP | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP | 3.8.18 | | Controller CECC-X-M1-YSL1 | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 | 3.8.18 | | Controller CECC-X-M1-YSL2 | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 | 3.8.18 | | Servo Press Kit YJKP | Festo:Partnumber:8077950 Festo:Ordercode:YJKP | 3.8.18 | | Servo Press Kit YJKP | Festo:Partnumber:8058596 Festo:Ordercode:YJKP | 3.8.18 |

Affected products

Fixed 11 products

Product	Identifier	Version	Remediation
Unresolved product id: CSAFPID-32001		—
Unresolved product id: CSAFPID-32002		—
Unresolved product id: CSAFPID-32003		—
Unresolved product id: CSAFPID-32004		—
Unresolved product id: CSAFPID-32005		—
Unresolved product id: CSAFPID-32006		—
Unresolved product id: CSAFPID-32007		—
Unresolved product id: CSAFPID-32008		—
Unresolved product id: CSAFPID-32009		—
Unresolved product id: CSAFPID-32010		—
Unresolved product id: CSAFPID-32011		—

Known affected 11 products

Product	Identifier	Version	Remediation
Unresolved product id: CSAFPID-31001		—
Unresolved product id: CSAFPID-31002		—
Unresolved product id: CSAFPID-31003		—
Unresolved product id: CSAFPID-31004		—
Unresolved product id: CSAFPID-31005		—
Unresolved product id: CSAFPID-31006		—
Unresolved product id: CSAFPID-31007		—
Unresolved product id: CSAFPID-31008		—
Unresolved product id: CSAFPID-31009		—
Unresolved product id: CSAFPID-31010		—
Unresolved product id: CSAFPID-31011		—

CVE-2022-30310

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn't check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 11 products, the same list as for CVE-2022-30311

Known affected 11 products, the same list as for CVE-2022-30311

CVE-2022-30309

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn't check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 11 products, the same list as for CVE-2022-30311

Known affected 11 products, the same list as for CVE-2022-30311

CVE-2022-30308

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn't check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 11 products, the same list as for CVE-2022-30311

Known affected 11 products, the same list as for CVE-2022-30311

References

4 references

URL	Category
https://certvde.com/en/advisories/VDE-2022-020/	self
https://festo.csaf-tp.certvde.com/.well-known/csa…	self
https://festo.com	external
https://certvde.com/en/advisories/vendor/festo/	external

Acknowledgments

CERT@VDE certvde.com

ONEKEY Research Labs Q. Kaiser M. Illes

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Q. Kaiser",
          "M. Illes"
        ],
        "organization": "ONEKEY Research Labs",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability.\nUpdate A, 2022-07-05\nRemediation has been updated. Fixed firmwares are now available.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Any person who is able to gain access to the webserver would be able to run arbitrary system commands on the device with root privileges.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
        "title": "Remediation"
      },
      {
        "category": "general",
        "text": "Currently, Festo has not identified any specific workarounds for this vulnerability. As part of a security strategy, Festo recommends the following general defense measures to reduce the risk of exploits:\n\n- Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from outside\n- Use firewalls to protect and separate the control system network from other networks\n- Use VPN (Virtual Private Networks) tunnels if remote access is required\n- Activate and apply user management and password features\n- Use encrypted communication links\n- Limit the access to both development and control system by physical means, operating system features, etc.\n- Protect both development and control system by using up to date virus detecting solutions\n\nFesto strongly recommends to minimize and protect network access to connected devices with state of the art techniques and processes. For a secure operation follow the recommendations in the product manuals.",
        "title": "General recommendation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@festo.com",
      "name": "Festo SE \u0026 Co. KG",
      "namespace": "https://festo.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "FSA-202201: Festo: CECC-X-M1 - command injection vulnerabilities - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2022-020/"
      },
      {
        "category": "self",
        "summary": "FSA-202201: Festo: CECC-X-M1 - command injection vulnerabilities - CSAF",
        "url": "https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2022/fsa-202201.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://festo.com"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Festo SE \u0026 Co. KG",
        "url": "https://certvde.com/en/advisories/vendor/festo/"
      }
    ],
    "title": "Festo: CECC-X-M1 - command injection vulnerabilities",
    "tracking": {
      "aliases": [
        "VDE-2022-020"
      ],
      "current_release_date": "2025-06-23T08:00:00.000Z",
      "generator": {
        "date": "2025-06-23T06:41:05.130Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.26"
        }
      },
      "id": "FSA-202201",
      "initial_release_date": "2022-07-06T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-07-06T07:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "date": "2025-06-05T13:28:12.000Z",
          "number": "2",
          "summary": "Fix: quotation mark"
        },
        {
          "date": "2025-06-23T08:00:00.000Z",
          "number": "3",
          "summary": "Changed Document ID"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1",
                "product": {
                  "name": "Controller CECC-X-M1",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8124922",
                      "4407603"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-MV",
                "product": {
                  "name": "Controller CECC-X-M1-MV",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "4407605",
                      "8124923"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-MV-S1",
                "product": {
                  "name": "Controller CECC-X-M1-MV-S1",
                  "product_id": "CSAFPID-11003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8124924",
                      "4407606"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-YS-L1",
                "product": {
                  "name": "Controller CECC-X-M1-YS-L1",
                  "product_id": "CSAFPID-11004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8082793"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-YS-L2",
                "product": {
                  "name": "Controller CECC-X-M1-YS-L2",
                  "product_id": "CSAFPID-11005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8082794"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-Y-YJKP",
                "product": {
                  "name": "Controller CECC-X-M1-Y-YJKP",
                  "product_id": "CSAFPID-11006",
                  "product_identification_helper": {
                    "model_numbers": [
                      "4803891"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Servo Press Kit YJKP",
                "product": {
                  "name": "Servo Press Kit YJKP",
                  "product_id": "CSAFPID-11007",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8077950"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Servo Press Kit YJKP-",
                "product": {
                  "name": "Servo Press Kit YJKP-",
                  "product_id": "CSAFPID-11008",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8058596"
                    ]
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "4.0.14",
                "product": {
                  "name": "Firmware 4.0.14",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=3.8.14",
                "product": {
                  "name": "Firmware \u003c=3.8.14",
                  "product_id": "CSAFPID-21002"
                }
              },
              {
                "category": "product_version",
                "name": "4.0.18",
                "product": {
                  "name": "Firmware 4.0.18",
                  "product_id": "CSAFPID-22001"
                }
              },
              {
                "category": "product_version",
                "name": "3.8.18",
                "product": {
                  "name": "Firmware 3.8.18",
                  "product_id": "CSAFPID-22002"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "Festo"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.14 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.14 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.14 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-31005"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-31006"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-YS-L1",
          "product_id": "CSAFPID-31007"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-YS-L2",
          "product_id": "CSAFPID-31008"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-Y-YJKP",
          "product_id": "CSAFPID-31009"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Servo Press Kit YJKP",
          "product_id": "CSAFPID-31010"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Servo Press Kit YJKP-",
          "product_id": "CSAFPID-31011"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.18 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-32003"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.18 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-32004"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.18 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-32005"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-32006"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-YS-L1",
          "product_id": "CSAFPID-32007"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-YS-L2",
          "product_id": "CSAFPID-32008"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-Y-YJKP",
          "product_id": "CSAFPID-32009"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Servo Press Kit YJKP",
          "product_id": "CSAFPID-32010"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Servo Press Kit YJKP-",
          "product_id": "CSAFPID-32011"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11008"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-30311",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-refresh-request\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30311"
    },
    {
      "cve": "CVE-2022-30310",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-acknerr-request\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30310"
    },
    {
      "cve": "CVE-2022-30309",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-off\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30309"
    },
    {
      "cve": "CVE-2022-30308",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-on\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30308"
    }
  ]
}

CVE-2022-30308 (GCVE-0-2022-30308)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-09-16 22:40

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 166 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2022-020/	x_refsource_CONFIRM

Impacted products

11 products

Vendor	Product	Version
Festo	Controller CECC-X-M1 (4407603)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:48:35.581Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (4407603)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (8124922)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (4407605)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (8124923)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (4407606)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (8124924)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L1 (8082793)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L2 (8082794)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-Y-YJKP (4803891)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP (8077950)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP- (8058596)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
        }
      ],
      "datePublic": "2022-06-07T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \u0026quot;cecc-x-web-viewer-request-on\u0026quot; POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.\u003c/p\u003e"
            }
          ],
          "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-on\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-10T07:34:11.747Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
        }
      ],
      "source": {
        "advisory": "VDE-2022-020",
        "discovery": "EXTERNAL"
      },
      "title": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-06-08T08:00:00.000Z",
          "ID": "CVE-2022-30308",
          "STATE": "PUBLIC",
          "TITLE": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Controller CECC-X-M1 (4407603)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1 (8124922)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (4407605)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (8124923)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (4407606)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (8124924)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L1 (8082793)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L2 (8082794)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-Y-YJKP (4803891)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP (8077950)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP- (8058596)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Festo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-on\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2022-020/",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2022-020",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-30308",
    "datePublished": "2022-06-13T13:45:20.015Z",
    "dateReserved": "2022-05-06T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:40:02.831Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30309 (GCVE-0-2022-30309)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-09-16 22:15

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 166 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2022-020/	x_refsource_CONFIRM

Impacted products

11 products

Vendor	Product	Version
Festo	Controller CECC-X-M1 (4407603)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:48:35.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (4407603)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (8124922)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (4407605)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (8124923)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (4407606)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (8124924)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L1 (8082793)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L2 (8082794)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-Y-YJKP (4803891)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP (8077950)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP- (8058596)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
        }
      ],
      "datePublic": "2022-06-07T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \u0026quot;cecc-x-web-viewer-request-off\u0026quot; POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.\u003c/p\u003e"
            }
          ],
          "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-off\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-10T07:35:06.910Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
        }
      ],
      "source": {
        "advisory": "VDE-2022-020",
        "discovery": "EXTERNAL"
      },
      "title": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-06-08T08:00:00.000Z",
          "ID": "CVE-2022-30309",
          "STATE": "PUBLIC",
          "TITLE": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Controller CECC-X-M1 (4407603)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1 (8124922)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (4407605)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (8124923)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (4407606)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (8124924)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L1 (8082793)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L2 (8082794)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-Y-YJKP (4803891)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP (8077950)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP- (8058596)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Festo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-off\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2022-020/",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2022-020",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-30309",
    "datePublished": "2022-06-13T13:45:21.634Z",
    "dateReserved": "2022-05-06T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:15:41.158Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30310 (GCVE-0-2022-30310)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-11-20 15:21

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-16 16:41 UTC

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 166 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2022-020/	x_refsource_CONFIRM

Impacted products

11 products

Vendor	Product	Version
Festo	Controller CECC-X-M1 (4407603)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:48:35.696Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-30310",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-16T16:41:19.148257Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T15:21:04.526Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (4407603)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (8124922)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (4407605)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (8124923)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (4407606)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (8124924)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L1 (8082793)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L2 (8082794)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-Y-YJKP (4803891)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP (8077950)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP- (8058596)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
        }
      ],
      "datePublic": "2022-06-07T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \u0026quot;cecc-x-acknerr-request\u0026quot; POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.\u003c/p\u003e"
            }
          ],
          "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-acknerr-request\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-10T07:35:23.988Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
        }
      ],
      "source": {
        "advisory": "VDE-2022-020",
        "discovery": "EXTERNAL"
      },
      "title": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-06-08T08:00:00.000Z",
          "ID": "CVE-2022-30310",
          "STATE": "PUBLIC",
          "TITLE": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Controller CECC-X-M1 (4407603)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1 (8124922)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (4407605)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (8124923)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (4407606)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (8124924)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L1 (8082793)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L2 (8082794)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-Y-YJKP (4803891)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP (8077950)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP- (8058596)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Festo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-acknerr-request\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2022-020/",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2022-020",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-30310",
    "datePublished": "2022-06-13T13:45:23.105Z",
    "dateReserved": "2022-05-06T00:00:00.000Z",
    "dateUpdated": "2024-11-20T15:21:04.526Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30311 (GCVE-0-2022-30311)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-09-16 23:41

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 166 records in the last 180 days details

References

1 reference

URL	Tags
https://cert.vde.com/en/advisories/VDE-2022-020/	x_refsource_CONFIRM

Impacted products

11 products

Vendor	Product	Version
Festo	Controller CECC-X-M1 (4407603)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:48:35.703Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (4407603)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (8124922)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (4407605)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (8124923)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (4407606)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (8124924)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L1 (8082793)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L2 (8082794)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-Y-YJKP (4803891)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP (8077950)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP- (8058596)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
        }
      ],
      "datePublic": "2022-06-07T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \u0026quot;cecc-x-refresh-request\u0026quot; POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.\u003c/p\u003e"
            }
          ],
          "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-refresh-request\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-10T07:36:02.588Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
        }
      ],
      "source": {
        "advisory": "VDE-2022-020",
        "discovery": "EXTERNAL"
      },
      "title": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-06-08T08:00:00.000Z",
          "ID": "CVE-2022-30311",
          "STATE": "PUBLIC",
          "TITLE": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Controller CECC-X-M1 (4407603)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1 (8124922)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (4407605)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (8124923)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (4407606)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (8124924)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L1 (8082793)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L2 (8082794)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-Y-YJKP (4803891)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP (8077950)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP- (8058596)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Festo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-refresh-request\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2022-020/",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2022-020",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-30311",
    "datePublished": "2022-06-13T13:45:24.763Z",
    "dateReserved": "2022-05-06T00:00:00.000Z",
    "dateUpdated": "2024-09-16T23:41:46.855Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

FSA-202201

CVE-2022-30308 (GCVE-0-2022-30308)

CVE-2022-30309 (GCVE-0-2022-30309)

CVE-2022-30310 (GCVE-0-2022-30310)

CVE-2022-30311 (GCVE-0-2022-30311)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour