PT-2023-5231 · Festo · Mse6-D2M+2

Published 2023-08-30 · Updated 2026-04-16 · CVE-2023-3634

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Festo MSE6-C2M, MSE6-D2M, and MSE6-E2M (affected versions not specified)

Description The issue is related to undocumented configuration commands in the software for managing and monitoring air consumption in pneumatic systems. Exploitation of this issue could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Hidden Functionality

Weakness Enumeration

CWE-912

CWE-1242

Related Identifiers

BDU:2023-05843

CVE-2023-3634

Affected Products

Mse6-C2M

Mse6-D2M

Mse6-E2M

References · 8

• https://bdu.fstec.ru/vul/2023-05843 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-3634 · Security Note
• https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2023/fsa-202304.json · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2044789459271438605 · Twitter Post
• https://twitter.com/CVEnew/status/2044701578746278069 · Twitter Post
• https://certvde.com/de/advisories/VDE-2023-020 · Note
• https://cert.vde.com/en/advisories/VDE-2023-020 · Note
• https://twitter.com/TweetThreatNews/status/1993017778685476865 · Twitter Post