A vulnerability was found in Festo Controller CECC-X-M1. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component POST Request Handler. The manipulation leads to os command injection.
This vulnerability is known as CVE-2022-30309. The attack can be launched remotely. There is no exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-30309 | Festo Controller CECC-X-M1 POST Request os command injection (VDE-2022-020)
A vulnerability was found in Festo Controller CECC-X-M1. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
- Keine herstellerspezifischen Bulletins in der Primärquelle hinterlegt.