Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system
The Festo controller CECC product family in firmware version 2.4.2.0 is affected by multiple vulnerabilities in the CODESYS V3 runtime.
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9011US | medium5.3 | — | ||
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames. | ||||
| CVE-2020-12069US | high7.8 | — | ||
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing… | ||||
| CVE-2020-12067US | high7.5 | — | ||
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password. | ||||
| CVE-2022-22519US | high7.5 | — | ||
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtim… | ||||
| CVE-2022-22517US | high7.5OT elevated | — | ||
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the c… | ||||
| CVE-2022-22515US | medium4.9 | — | ||
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file… | ||||
| CVE-2022-22514US | high7.1 | — | ||
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTrac… | ||||
| CVE-2022-22513US | medium6.5 | — | ||
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. | ||||
| CVE-2021-36764US | high7.5 | — | ||
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products an… | ||||
| CVE-2021-36763US | high7.5 | — | ||
In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. | ||||
| CVE-2021-33485US | critical9.8 | — | ||
CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. | ||||
| CVE-2021-29242US | high7.3 | — | ||
CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-r… | ||||
| CVE-2021-29241US | high7.5 | — | ||
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS). | ||||
| CVE-2020-15806US | high7.5 | — | ||
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation. | ||||
| CVE-2020-12068US | medium6.5 | — | ||
An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation. | ||||
| CVE-2019-5105US | high7.5 | — | ||
An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can… | ||||
| CVE-2020-10245US | critical9.8 | — | ||
CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. | ||||
| CVE-2019-9013US | high8.8OT elevated | — | ||
An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected duri… | ||||
references
External citations — patches, advisories, analysis.
- FSA-202203: Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system - HTMLself
- CERT@VDE Security Advisories for Festo SE & Co. KGexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- FSA-202203: Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system - CSAFself
remediations (18)
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
- No fix planned
No fix planned. This issue will be handled with next hardware generation release.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan