PT-2014-3831 · Festo+1 · Festo Cecx-X-C1 Modular Master Controller+2

CVE-2014-0769

·

Publicado

2014-04-25

·

Atualizado

2025-07-02

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Festo CECX-X-C1 Modular Master Controller with CoDeSys (affected versions not specified) Festo CECX-X-M1 Modular Controller with CoDeSys (affected versions not specified)
Description The issue allows remote attackers to modify the configuration or delete log entries without authentication. This can be achieved by sending a request to the debug service on port 4000 or the log service on port 4001.
Recommendations For Festo CECX-X-C1 Modular Master Controller with CoDeSys, restrict access to the debug service on port 4000 and the log service on port 4001 to minimize the risk of exploitation. For Festo CECX-X-M1 Modular Controller with CoDeSys, restrict access to the debug service on port 4000 and the log service on port 4001 to minimize the risk of exploitation.

Correção

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2014-0769

Produtos afetados

Codesys
Festo Cecx-X-C1 Modular Master Controller
Festo Cecx-X-M1 Modular Controller