Festo: Incomplete documentation of remote accessible functions and protocols in Festo products
view advisory published 2022-11-29
Incomplete Festo product documentation of remote accessible functions and their required IP ports. Depending on the product a description of the supported features can be found in the product documentation to some extent. Update A, 2022-12-13 Added affected device "Bus module CPX-E-PN, 4080497"
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3270US | — | — | ||
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity a… | ||||
02
references
External citations — patches, advisories, analysis.
- FSA-202209: Festo: Incomplete documentation of remote accessible functions and protocols in Festo products - HTMLself
- CERT@VDE Security Advisories for Festo SE & Co. KGexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- FSA-202209: Festo: Incomplete documentation of remote accessible functions and protocols in Festo products - CSAFself
03
remediations (1)
- Mitigation
Update of technical user manual documentation in next product version.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan