Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions
Incomplete user documentation of undocumented, authenticated test mode and further remote accessible functions. The supported features may be covered only partly by the corresponding user documentation. Festo developed the products according to the respective state of the art. As a result, the protocols used no longer fully meet today's security requirements. The products are designed and developed for use in sealed-off (industrial) networks. If the network is not adequately sealed off, unauthorized access to the product can cause damage or malfunctions, particularly Denial of Service (DoS) or loss of integrity.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-3634US | — | — | ||
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- FSA-202304: Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions - HTMLself
- CERT@VDE Security Advisoriesexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- FSA-202304: Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions - CSAFself
Behebungen (1)
- Behoben
Update of user documentation in next product version.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan