9.3
CVE-2014-0769
- EPSS 0.33%
- Veröffentlicht 25.04.2014 05:12:07
- Zuletzt bearbeitet 02.07.2025 21:15:39
- Quelle ics-cert@hq.dhs.gov
- Teams Watchlist Login
- Unerledigt Login
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Softmotion3d ≫ Softmotion Version-
Festo ≫ Cecx-x-m1 Modular Controller Version-
3s-software ≫ Codesys Runtime System Version-
Festo ≫ Cecx-x-c1 Modular Master Controller Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.33% | 0.523 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
| ics-cert@hq.dhs.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.