CVE-2022-3079 - Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function · CoreCVE

Back Back to CVE browser

HIGH

Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function

Published Sep 20, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.76%

Description

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.

Affected products

Vendor Festo Product Control block CPX-CEC-C1 (no. 567347) Default
n/a
- Version
  0.0.1
  Status
  affected
  Constraints
  <=2.0.12
Vendor Festo Product Control block CPX-CMXX (no. 555667) Default
n/a
- Version
  0.0.1
  Status
  affected
  Constraints
  <=1.2.34 rev.269404

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Control block CPX-CEC-C1 (no. 567347)

n/a

Version	Status	Constraints
0.0.1	affected	<=2.0.12

Control block CPX-CMXX (no. 555667)

n/a

Version	Status	Constraints
0.0.1	affected	<=1.2.34 rev.269404

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (1)

https://cert.vde.com/en/advisories/VDE-2022-036
x_refsource_CONFIRMMitigationThird Party Advisory

Link	Providers	Tags
https://cert.vde.com/en/advisories/VDE-2022-036		x_refsource_CONFIRMMitigationThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner CERTVDE

Published Sep 20, 2022

Updated May 29, 2025

Reserved Sep 1, 2022

Link CVE-2022-3079

CISA Vulnrichment

Updated May 29, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3079

Severity n/a

Public date n/a

Links CVE-2022-3079