Festo: Incomplete documentation of remote accessible functions and protocols in Festo products
Advisory ansehen veröffentlicht 2022-11-29
Incomplete Festo product documentation of remote accessible functions and their required IP ports. Depending on the product a description of the supported features can be found in the product documentation to some extent. Update A, 2022-12-13 Added affected device "Bus module CPX-E-PN, 4080497"
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3270US | — | — | ||
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity a… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- FSA-202209: Festo: Incomplete documentation of remote accessible functions and protocols in Festo products - HTMLself
- CERT@VDE Security Advisories for Festo SE & Co. KGexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- FSA-202209: Festo: Incomplete documentation of remote accessible functions and protocols in Festo products - CSAFself
03
Behebungen (1)
- Mitigation
Update of technical user manual documentation in next product version.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan