7.5

CVE-2022-3079

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.

Data is provided by the National Vulnerability Database (NVD)
Festo ≫ Cpx-cmxx Firmware Version <= 2.0.12
   Festo ≫ Cpx-cmxx Version-
Festo ≫ Cpx-cec-c1 Firmware Version <= 1.2.34
   Festo ≫ Cpx-cec-c1 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.12% 0.32
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
info@cert.vde.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://cert.vde.com/en/advisories/VDE-2022-036
Third Party Advisory
Mitigation