9.3
CVE-2014-0760
- EPSS 2.01%
- Published 25.04.2014 05:12:07
- Last modified 02.07.2025 21:15:39
- Source ics-cert@hq.dhs.gov
- Teams watchlist Login
- Open Login
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Data is provided by the National Vulnerability Database (NVD)
3s-software ≫ Codesys Runtime System Version-
Festo ≫ Cecx-x-c1 Modular Master Controller Version-
Softmotion3d ≫ Softmotion Version-
Festo ≫ Cecx-x-m1 Modular Controller Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 2.01% | 0.829 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
ics-cert@hq.dhs.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.