CVE-2014-0760 Festo CECX-X-(C1/M1) Controller Improper Authentication
HighCVSS 9.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1
Modular Controller with CoDeSys and SoftMotion provide an undocumented
access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application
crash) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3s-software codesys runtime system | All versions | No fix listed |
| festo cecx-x-c1 modular master controller | All versions | No fix listed |
| softmotion3d softmotion | All versions | No fix listed |
| festo cecx-x-m1 modular controller | All versions | No fix listed |
| festo CECX-X-C1 Modular Master Controller with CoDeSys | All versions | No fix listed |
| festo CECX-X-M1 Modular Controller with CoDeSys and SoftMotion | All versions | No fix listed |
References
- www.cisa.gov
- ics-cert.us-cert.gov us-government-resource