CVE-2022-3270
Incomplete Documentation of remote functions in FESTO products.
- State
- Published
- Severity
- 9.8 Critical
- Published
- Dec 1, 2022
- Updated
- Apr 24, 2025
- Reserved
- Sep 22, 2022
Description
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CERTVDE |
Weaknesses
- CWE-1059 Incomplete Documentation
Affected Products
| Product | Versions |
|---|---|
Bus module CPX-E-EPFesto SE |
|
Bus node CPX-FB32Festo SE |
|
Bus node CPX-FB33Festo SE |
|
Bus node CPX-FB36Festo SE |
|
Bus node CPX-FB37Festo SE |
|
Bus node CPX-FB39Festo SE |
|
Bus node CPX-FB40Festo SE |
|
Bus node CPX-FB43Festo SE |
|
Bus node CPX-M-FB34Festo SE |
|
Bus node CPX-M-FB35Festo SE |
|
Bus node CPX-M-FB44Festo SE |
|
Bus node CPX-M-FB45Festo SE |
|
Bus node CTEU-EPFesto SE |
|
Bus node CTEU-PNFesto SE |
|
Bus node CTEU-PN-EX1CFesto SE |
|
Camera system CHB-C-NFesto SE |
|
Compact Vision System SBO*-C-*Festo SE |
|
Compact Vision System SBO*-M-*Festo SE |
|
Compact Vision System SBO*-Q-*Festo SE |
|
Control block CPX-CECFesto SE |
|
Control block CPX-CEC-C1Festo SE |
|
Control block CPX-CEC-C1-V3Festo SE |
|
Control block CPX-CEC-M1Festo SE |
|
Control block CPX-CEC-M1-V3Festo SE |
|
Control block CPX-CEC-S1-V3Festo SE |
|
Control block CPX-CMXXFesto SE |
|
Control block CPX-CMXXFesto SE |
|
Control block CPX-FEC-1-IEFesto SE |
|
Controller CECC-DFesto SE |
|
Controller CECC-D-BAFesto SE |
|
Controller CECC-LKFesto SE |
|
Controller CECC-SFesto SE |
|
Controller CECC-X-*Festo SE |
|
Controller CECX-X-C1Festo SE |
|
Controller CECX-X-M1Festo SE |
|
Controller CMXH-ST2-C5-7-DIOPFesto SE |
|
Controller CPX-E-CEC-*Festo SE |
|
Controller SBRD-QFesto SE |
|
EtherNet/IP interface CPX-AP-I-EP-M12Festo SE |
|
EtherNet/IP interface CPX-AP-I-PN-M12Festo SE |
|
Gateway CPX-IOTFesto SE |
|
Integrated drive EMCA-EC-67-*Festo SE |
|
Motor controller CMMO-ST-C5-1-DIONFesto SE |
|
Motor controller CMMO-ST-C5-1-DIOPFesto SE |
|
Motor controller CMMO-ST-C5-1-LKPFesto SE |
|
Motor controller CMMP-AS-*Festo SE |
|
Motor controller CMMT-AS-*Festo SE |
|
Operator unit CDPX-X-A-S-10Festo SE |
|
Operator unit CDPX-X-A-W-13Festo SE |
|
Operator unit CDPX-X-A-W-4Festo SE |
|
Operator unit CDPX-X-A-W-7Festo SE |
|
Planar surface gantry EXCM-*Festo SE |
|
Servo drive CMMT-ST-C8-1C-EP-S0Festo SE |
|
Servo drive CMMT-ST-C8-1C-PN-S0Festo SE |
|
VTEM-S1-*Festo SE |
|
Bus module CPX-E-PNFesto SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.