by Kastro
Paper/Archive/CVE-2022-30310

CVE-2022-30310

Festo Controller CECC-X-M1 (4407603) — FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 85.9.859 × 2017.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Affected

ProductAffectedFixed inSource
Controller CECC-X-M1 (4407603)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1 (8124922)4.0.14–CNA
Controller CECC-X-M1-MV (4407605)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-MV (8124923)4.0.14–CNA
Controller CECC-X-M1-MV-S1 (4407606)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-MV-S1 (8124924)4.0.14–CNA
Controller CECC-X-M1-YS-L1 (8082793)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-YS-L2 (8082794)3.0.0 – 3.8.14–CNA
Controller CECC-X-M1-Y-YJKP (4803891)3.0.0 – 3.8.14–CNA
Servo Press Kit YJKP (8077950)3.0.0 – 3.8.14–CNA
Servo Press Kit YJKP- (8058596)3.0.0 – 3.8.14–CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcert.vde.com/en/advisories/VDE-2022-020