Riskcovery

CVE-2023-3634

Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

State
Published
Severity
8.8 High
Published
Apr 16, 2026
Updated
Apr 16, 2026
Reserved
Jul 12, 2023

Read the record on cve.org

Description

In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCERTVDE

Weaknesses

  • CWE-1242 Inclusion of Undocumented Features or Chicken Bits

Affected Products

ProductVersions
MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGDFesto
  • *Affected
MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L5-AGDFesto
  • *Affected
MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L4-MQ1-AGDFesto
  • *Affected
MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L5-MQ1-AGDFesto
  • *Affected
MSE6-C2M-5000-FB44-D-M-RG-BAR-AMI-AGDFesto
  • *Affected
MSE6-C2M-5000-FB44-D-RG-BAR-AMI-AGDFesto
  • *Affected
MSE6-D2M-5000-CBUS-S-RG-BAR-VCB-AGDFesto
  • *Affected
MSE6-E2M-5000-FB13-AGDFesto
  • *Affected
MSE6-E2M-5000-FB36-AGDFesto
  • *Affected
MSE6-E2M-5000-FB37-AGDFesto
  • *Affected
MSE6-E2M-5000-FB43-AGDFesto
  • *Affected
MSE6-E2M-5000-FB44-AGDFesto
  • *Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.