Vulnerability-Lookup

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Q. Kaiser",
          "M. Illes"
        ],
        "organization": "ONEKEY Research Labs",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability.\nUpdate A, 2022-07-05\nRemediation has been updated. Fixed firmwares are now available.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Any person who is able to gain access to the webserver would be able to run arbitrary system commands on the device with root privileges.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
        "title": "Remediation"
      },
      {
        "category": "general",
        "text": "Currently, Festo has not identified any specific workarounds for this vulnerability. As part of a security strategy, Festo recommends the following general defense measures to reduce the risk of exploits:\n\n- Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from outside\n- Use firewalls to protect and separate the control system network from other networks\n- Use VPN (Virtual Private Networks) tunnels if remote access is required\n- Activate and apply user management and password features\n- Use encrypted communication links\n- Limit the access to both development and control system by physical means, operating system features, etc.\n- Protect both development and control system by using up to date virus detecting solutions\n\nFesto strongly recommends to minimize and protect network access to connected devices with state of the art techniques and processes. For a secure operation follow the recommendations in the product manuals.",
        "title": "General recommendation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@festo.com",
      "name": "Festo SE \u0026 Co. KG",
      "namespace": "https://festo.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "FSA-202201: Festo: CECC-X-M1 - command injection vulnerabilities - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2022-020/"
      },
      {
        "category": "self",
        "summary": "FSA-202201: Festo: CECC-X-M1 - command injection vulnerabilities - CSAF",
        "url": "https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2022/fsa-202201.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://festo.com"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Festo SE \u0026 Co. KG",
        "url": "https://certvde.com/en/advisories/vendor/festo/"
      }
    ],
    "title": "Festo: CECC-X-M1 - command injection vulnerabilities",
    "tracking": {
      "aliases": [
        "VDE-2022-020"
      ],
      "current_release_date": "2025-06-23T08:00:00.000Z",
      "generator": {
        "date": "2025-06-23T06:41:05.130Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.26"
        }
      },
      "id": "FSA-202201",
      "initial_release_date": "2022-07-06T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-07-06T07:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "date": "2025-06-05T13:28:12.000Z",
          "number": "2",
          "summary": "Fix: quotation mark"
        },
        {
          "date": "2025-06-23T08:00:00.000Z",
          "number": "3",
          "summary": "Changed Document ID"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1",
                "product": {
                  "name": "Controller CECC-X-M1",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8124922",
                      "4407603"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-MV",
                "product": {
                  "name": "Controller CECC-X-M1-MV",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "4407605",
                      "8124923"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-MV-S1",
                "product": {
                  "name": "Controller CECC-X-M1-MV-S1",
                  "product_id": "CSAFPID-11003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8124924",
                      "4407606"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-YS-L1",
                "product": {
                  "name": "Controller CECC-X-M1-YS-L1",
                  "product_id": "CSAFPID-11004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8082793"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-YS-L2",
                "product": {
                  "name": "Controller CECC-X-M1-YS-L2",
                  "product_id": "CSAFPID-11005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8082794"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Controller CECC-X-M1-Y-YJKP",
                "product": {
                  "name": "Controller CECC-X-M1-Y-YJKP",
                  "product_id": "CSAFPID-11006",
                  "product_identification_helper": {
                    "model_numbers": [
                      "4803891"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Servo Press Kit YJKP",
                "product": {
                  "name": "Servo Press Kit YJKP",
                  "product_id": "CSAFPID-11007",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8077950"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Servo Press Kit YJKP-",
                "product": {
                  "name": "Servo Press Kit YJKP-",
                  "product_id": "CSAFPID-11008",
                  "product_identification_helper": {
                    "model_numbers": [
                      "8058596"
                    ]
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "4.0.14",
                "product": {
                  "name": "Firmware 4.0.14",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=3.8.14",
                "product": {
                  "name": "Firmware \u003c=3.8.14",
                  "product_id": "CSAFPID-21002"
                }
              },
              {
                "category": "product_version",
                "name": "4.0.18",
                "product": {
                  "name": "Firmware 4.0.18",
                  "product_id": "CSAFPID-22001"
                }
              },
              {
                "category": "product_version",
                "name": "3.8.18",
                "product": {
                  "name": "Firmware 3.8.18",
                  "product_id": "CSAFPID-22002"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "Festo"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.14 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.14 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.14 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-31005"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-31006"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-YS-L1",
          "product_id": "CSAFPID-31007"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-YS-L2",
          "product_id": "CSAFPID-31008"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Controller CECC-X-M1-Y-YJKP",
          "product_id": "CSAFPID-31009"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Servo Press Kit YJKP",
          "product_id": "CSAFPID-31010"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c=3.8.14 installed on Servo Press Kit YJKP-",
          "product_id": "CSAFPID-31011"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.18 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-32003"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.18 installed on Controller CECC-X-M1-MV",
          "product_id": "CSAFPID-32004"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 4.0.18 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-32005"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-MV-S1",
          "product_id": "CSAFPID-32006"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-YS-L1",
          "product_id": "CSAFPID-32007"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-YS-L2",
          "product_id": "CSAFPID-32008"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Controller CECC-X-M1-Y-YJKP",
          "product_id": "CSAFPID-32009"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Servo Press Kit YJKP",
          "product_id": "CSAFPID-32010"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.8.18 installed on Servo Press Kit YJKP-",
          "product_id": "CSAFPID-32011"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11008"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-30311",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-refresh-request\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30311"
    },
    {
      "cve": "CVE-2022-30310",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-acknerr-request\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30310"
    },
    {
      "cve": "CVE-2022-30309",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-off\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30309"
    },
    {
      "cve": "CVE-2022-30308",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-on\" POST request doesn\u0027t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Please update to firmware versions as described below:\n\n| Product                      | Product Details                                           | Fixed in version |\n|-----------------------------|-----------------------------------------------------------|------------------|\n| Controller CECC-X-M1        | Festo:Partnumber:4407603 Festo:Ordercode:CECC-X-M1     |  3.8.18        |\n| Controller CECC-X-M1        | Festo:Partnumber:8124922 Festo:Ordercode:CECC-X-M1     |  4.0.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:4407605 Festo:Ordercode:CECC-X-M1-MV  |  3.8.18        |\n| Controller CECC-X-M1-MV     | Festo:Partnumber:8124923 Festo:Ordercode:CECC-X-M1-MV  |  4.0.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:4407606 Festo:Ordercode:CECC-X-M1-MV-S1 |  3.8.18        |\n| Controller CECC-X-M1-MVS1   | Festo:Partnumber:8124924 Festo:Ordercode:CECC-X-M1-MV-S1 |  4.0.18        |\n| Controller CECC-X-M1-YYJKP  | Festo:Partnumber:4803891 Festo:Ordercode:CECC-X-M1-YYJKP |  3.8.18        |\n| Controller CECC-X-M1-YSL1   | Festo:Partnumber:8082793 Festo:Ordercode:CECC-X-M1-YS-L1 |  3.8.18        |\n| Controller CECC-X-M1-YSL2   | Festo:Partnumber:8082794 Festo:Ordercode:CECC-X-M1-YS-L2 |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8077950 Festo:Ordercode:YJKP          |  3.8.18        |\n| Servo Press Kit YJKP        | Festo:Partnumber:8058596 Festo:Ordercode:YJKP          |  3.8.18        |",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011"
          ]
        }
      ],
      "title": "CVE-2022-30308"
    }
  ]
}

CVE-2022-30309 (GCVE-0-2022-30309)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-09-16 22:15

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

URL

Tags

x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

Affected: 3.0.0 , ≤ 3.8.14 (custom)

Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public ?

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:48:35.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (4407603)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (8124922)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (4407605)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (8124923)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (4407606)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (8124924)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L1 (8082793)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L2 (8082794)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-Y-YJKP (4803891)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP (8077950)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP- (8058596)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
        }
      ],
      "datePublic": "2022-06-07T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \u0026quot;cecc-x-web-viewer-request-off\u0026quot; POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.\u003c/p\u003e"
            }
          ],
          "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-off\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-10T07:35:06.910Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
        }
      ],
      "source": {
        "advisory": "VDE-2022-020",
        "discovery": "EXTERNAL"
      },
      "title": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-06-08T08:00:00.000Z",
          "ID": "CVE-2022-30309",
          "STATE": "PUBLIC",
          "TITLE": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Controller CECC-X-M1 (4407603)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1 (8124922)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (4407605)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (8124923)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (4407606)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (8124924)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L1 (8082793)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L2 (8082794)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-Y-YJKP (4803891)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP (8077950)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP- (8058596)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Festo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-off\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2022-020/",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2022-020",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-30309",
    "datePublished": "2022-06-13T13:45:21.634Z",
    "dateReserved": "2022-05-06T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:15:41.158Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30311 (GCVE-0-2022-30311)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-09-16 23:41

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

URL

Tags

x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

Affected: 3.0.0 , ≤ 3.8.14 (custom)

Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public ?

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:48:35.703Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (4407603)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (8124922)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (4407605)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (8124923)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (4407606)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (8124924)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L1 (8082793)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L2 (8082794)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-Y-YJKP (4803891)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP (8077950)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP- (8058596)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
        }
      ],
      "datePublic": "2022-06-07T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \u0026quot;cecc-x-refresh-request\u0026quot; POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.\u003c/p\u003e"
            }
          ],
          "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-refresh-request\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-10T07:36:02.588Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
        }
      ],
      "source": {
        "advisory": "VDE-2022-020",
        "discovery": "EXTERNAL"
      },
      "title": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-06-08T08:00:00.000Z",
          "ID": "CVE-2022-30311",
          "STATE": "PUBLIC",
          "TITLE": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Controller CECC-X-M1 (4407603)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1 (8124922)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (4407605)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (8124923)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (4407606)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (8124924)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L1 (8082793)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L2 (8082794)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-Y-YJKP (4803891)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP (8077950)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP- (8058596)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Festo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-refresh-request\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2022-020/",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2022-020",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-30311",
    "datePublished": "2022-06-13T13:45:24.763Z",
    "dateReserved": "2022-05-06T00:00:00.000Z",
    "dateUpdated": "2024-09-16T23:41:46.855Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30308 (GCVE-0-2022-30308)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-09-16 22:40

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

URL

Tags

x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

Affected: 3.0.0 , ≤ 3.8.14 (custom)

Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public ?

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:48:35.581Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (4407603)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1 (8124922)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (4407605)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV (8124923)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (4407606)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-MV-S1 (8124924)",
          "vendor": "Festo",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.14"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L1 (8082793)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-YS-L2 (8082794)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Controller CECC-X-M1-Y-YJKP (4803891)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP (8077950)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Servo Press Kit YJKP- (8058596)",
          "vendor": "Festo",
          "versions": [
            {
              "lessThanOrEqual": "3.8.14",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
        }
      ],
      "datePublic": "2022-06-07T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \u0026quot;cecc-x-web-viewer-request-on\u0026quot; POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.\u003c/p\u003e"
            }
          ],
          "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-on\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-10T07:34:11.747Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
        }
      ],
      "source": {
        "advisory": "VDE-2022-020",
        "discovery": "EXTERNAL"
      },
      "title": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-06-08T08:00:00.000Z",
          "ID": "CVE-2022-30308",
          "STATE": "PUBLIC",
          "TITLE": "FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Controller CECC-X-M1 (4407603)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1 (8124922)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (4407605)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV (8124923)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (4407606)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-MV-S1 (8124924)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "4.0.14",
                            "version_value": "4.0.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L1 (8082793)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-YS-L2 (8082794)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Controller CECC-X-M1-Y-YJKP (4803891)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP (8077950)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Servo Press Kit YJKP- (8058596)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "3.0.0",
                            "version_value": "3.8.14"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Festo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-web-viewer-request-on\" POST request doesn\u2019t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-863 Incorrect Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2022-020/",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2022-020/"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2022-020",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-30308",
    "datePublished": "2022-06-13T13:45:20.015Z",
    "dateReserved": "2022-05-06T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:40:02.831Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30310 (GCVE-0-2022-30310)

Vulnerability from cvelistv5 – Published: 2022-06-13 13:45 – Updated: 2024-11-20 15:21

Title

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

Summary

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-863 - Incorrect Authorization
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

URL

Tags

x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

Affected: 3.0.0 , ≤ 3.8.14 (custom)

Festo	Controller CECC-X-M1 (8124922)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV (4407605)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV (8124923)	Affected: 4.0.14
Festo	Controller CECC-X-M1-MV-S1 (4407606)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-MV-S1 (8124924)	Affected: 4.0.14
Festo	Controller CECC-X-M1-YS-L1 (8082793)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-YS-L2 (8082794)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Controller CECC-X-M1-Y-YJKP (4803891)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP (8077950)	Affected: 3.0.0 , ≤ 3.8.14 (custom)
Festo	Servo Press Kit YJKP- (8058596)	Affected: 3.0.0 , ≤ 3.8.14 (custom)

Date Public ?

2022-06-07 22:00

Credits

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo

Show details on NVD website