CVE-2022-30309

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Score

CVSS 3.1 9.8 Critical

Status

Modified - info@cert.vde.com

Published

2022-06-13

Last modified

2024-09-16

Weaknesses

CWE-78, CWE-863

Affected products

• Controller Cecc-x-m1-mv-s1 4407606 (Festo)
• Controller Cecc-x-m1-mv-s1 8124924 (Festo)
• Controller Cecc-x-m1-mv-s1 Firmware (Festo)
• Controller Cecc-x-m1-mv 4407605 (Festo)
• Controller Cecc-x-m1-mv 8124923 (Festo)
• Controller Cecc-x-m1-mv Firmware (Festo)
• Controller Cecc-x-m1-y-yjkp 4803891 (Festo)
• Controller Cecc-x-m1-y-yjkp Firmware (Festo)
• Controller Cecc-x-m1-ys-l1 8082793 (Festo)
• Controller Cecc-x-m1-ys-l1 Firmware (Festo)
• Controller Cecc-x-m1-ys-l2 8082794 (Festo)
• Controller Cecc-x-m1-ys-l2 Firmware (Festo)
• Controller Cecc-x-m1 4407603 (Festo)
• Controller Cecc-x-m1 8124922 (Festo)
• Controller Cecc-x-m1 Firmware (Festo)
• Servo Press Kit Yjkp- 8058596 (Festo)
• Servo Press Kit Yjkp- Firmware (Festo)
• Servo Press Kit Yjkp 8077950 (Festo)
• Servo Press Kit Yjkp Firmware (Festo)

References

• https://cert.vde.com/en/advisories/VDE-2022-020/