M. Illes

Researcher fromONEKEY Research Labs
#10633of 60,574
30Total CVSS
Vulnerabilities · 3
Critical
3
PT-2022-20058
2022-06-13
10
CVE-2022-30308
Festo
Festo Controller Cecc-X-M1
The issue concerns the `http-endpoint` "cecc-x-web-viewer-request-on" `POST` request, which does not check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
PT-2022-20059
2022-06-13
10
CVE-2022-30309
Festo
Festo Controller Cecc-X-M1
The issue concerns the `http-endpoint` "cecc-x-web-viewer-request-off" `POST` request, which does not check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.
PT-2022-20061
2022-06-13
10
CVE-2022-30310
Festo
Festo Controller Cecc-X-M1
The issue is related to the http-endpoint "cecc-x-acknerr-request" POST request, which does not check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.