In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.
| Vendor | Product | Versions |
|---|---|---|
| Festo SE | Bus module CPX | E-EP — all |
| Festo SE | Bus node CPX | FB32 — all |
| Festo SE | Bus node CPX | FB33 — all |
| Festo SE | Bus node CPX | FB36 — all |
| Festo SE | Bus node CPX | FB37 — all |
| Festo SE | Bus node CPX | FB39 — all |
| Festo SE | Bus node CPX | FB40 — all |
| Festo SE | Bus node CPX | FB43 — all |
| Festo SE | Bus node CPX | M-FB34 — all |
| Festo SE | Bus node CPX | M-FB35 — all |
| Festo SE | Bus node CPX | M-FB44 — all |
| Festo SE | Bus node CPX | M-FB45 — all |
| Festo SE | Bus node CTEU | EP — all |
| Festo SE | Bus node CTEU | PN — all |
| Festo SE | Bus node CTEU | PN-EX1C — all |
| Festo SE | Camera system CHB | C-N — all |
| Festo SE | Compact Vision System SBO* | C-* — all |
| Festo SE | Compact Vision System SBO* | M-* — all |
| Festo SE | Compact Vision System SBO* | Q-* — all |
| Festo SE | Control block CPX | CEC — all |
| Festo SE | Control block CPX | CEC-C1 — all |
| Festo SE | Control block CPX | CEC-C1-V3 — all |
| Festo SE | Control block CPX | CEC-M1 — all |
| Festo SE | Control block CPX | CEC-M1-V3 — all |
| Festo SE | Control block CPX | CEC-S1-V3 — all |
| Festo SE | Control block CPX | CMXX — all |
| Festo SE | Control block CPX | CMXX — all |
| Festo SE | Control block CPX | FEC-1-IE — all |
| Festo SE | Controller CECC | D — all |
| Festo SE | Controller CECC | D-BA — all |
| Festo SE | Controller CECC | LK — all |
| Festo SE | Controller CECC | S — all |
| Festo SE | Controller CECC | X-* — all |
| Festo SE | Controller CECX | X-C1 — all |
| Festo SE | Controller CECX | X-M1 — all |
| Festo SE | Controller CMXH | ST2-C5-7-DIOP — all |
| Festo SE | Controller CPX | E-CEC-* — all |
| Festo SE | Controller SBRD | Q — all |
| Festo SE | EtherNet/IP interface CPX | AP-I-EP-M12 — all |
| Festo SE | EtherNet/IP interface CPX | AP-I-PN-M12 — all |
| Festo SE | Gateway CPX | IOT — all |
| Festo SE | Integrated drive EMCA | EC-67-* — all |
| Festo SE | Motor controller CMMO | ST-C5-1-DION — all |
| Festo SE | Motor controller CMMO | ST-C5-1-DIOP — all |
| Festo SE | Motor controller CMMO | ST-C5-1-LKP — all |
| Festo SE | Motor controller CMMP | AS-* — all |
| Festo SE | Motor controller CMMT | AS-* — all |
| Festo SE | Operator unit CDPX | X-A-S-10 — all |
| Festo SE | Operator unit CDPX | X-A-W-13 — all |
| Festo SE | Operator unit CDPX | X-A-W-4 — all |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.