by Kastro
Paper/Archive/CVE-2022-30308

CVE-2022-30308

Festo Controller CECC-X-M1 (4407603) — FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 87.0.870 × 2017.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Affected

ProductAffectedFixed inSource
Controller CECC-X-M1 (4407603)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1 (8124922)4.0.14–CNA
Controller CECC-X-M1-MV (4407605)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-MV (8124923)4.0.14–CNA
Controller CECC-X-M1-MV-S1 (4407606)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-MV-S1 (8124924)4.0.14–CNA
Controller CECC-X-M1-YS-L1 (8082793)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-YS-L2 (8082794)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-Y-YJKP (4803891)3.0.0 – 3.8.14–CNA
Servo Press Kit YJKP (8077950)3.0.0 – 3.8.14–CNA
Servo Press Kit YJKP- (8058596)3.0.0 – 3.8.14–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcert.vde.com/en/advisories/VDE-2022-020