CVE-2014-0769 Festo CECX-X-(C1/M1) Controller Improper Authentication
HighCVSS 9.3
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softmotion3d softmotion | All versions | No fix listed |
| festo cecx-x-m1 modular controller | All versions | No fix listed |
| 3s-software codesys runtime system | All versions | No fix listed |
| festo cecx-x-c1 modular master controller | All versions | No fix listed |
| festo CECX-X-C1 Modular Master Controller with CoDeSys | All versions | No fix listed |
| festo CECX-X-M1 Modular Controller with CoDeSys and SoftMotion | All versions | No fix listed |
References
- www.cisa.gov
- ics-cert.us-cert.gov us-government-resource