FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CVE-2022-30309

9.8CRITICAL

Key Information:

Vendor

Festo

Status
Controller Cecc-x-m1 (4407603)
Controller Cecc-x-m1 (8124922)
Controller Cecc-x-m1-mv (4407605)
Controller Cecc-x-m1-mv (8124923)
Vendor
CVE Published:
13 June 2022

What is CVE-2022-30309?

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Affected Version(s)

Controller CECC-X-M1 (4407603) 3.0.0 <= 3.8.14

Controller CECC-X-M1 (8124922) 4.0.14

Controller CECC-X-M1-MV (4407605) 3.0.0 <= 3.8.14

References

https://cert.vde.com/en/advisories/VDE-2022-020/
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Q. Kaiser, M. Illes from ONEKEY Research Labs for reported to Festo
.