PT-2022-4837 · Festo · Festo Control Block Cpx-Cmxx+1

Daniel Dos Santos + 1 · Published 2022-09-20 · Updated 2025-10-03 · CVE-2022-3079

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Festo control block CPX-CEC-C1 and CPX-CMXX versions (affected versions not specified)

Description The issue is related to the lack of authentication for a critical function in the web interface of the Festo control block CPX-CEC-C1 and CPX-CMXX. This allows unauthenticated, remote access to critical webpage functions, which may cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2022-05897

CVE-2022-3079

Affected Products

Festo Control Block Cpx-Cec-C1

Festo Control Block Cpx-Cmxx

References · 8

• https://osv.dev/vulnerability/CVE-2022-3079 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05897 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3079 · Security Note
• https://t.me/true_secator/3768 · Telegram Post
• https://twitter.com/TweetThreatNews/status/1974004488475185222 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2022-036 · Note
• https://t.me/cibsecurity/50133 · Telegram Post
• https://t.me/cvenotify/36500 · Telegram Post