CVE-2022-30311

 

Published at: - 13-06-2022 04:15

Last modified: - 13-09-2022 11:32

Total changes: - 5

Description

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://cert.vde.com/en/advisories/VDE-2022-020/

 

Keywords

NVD

 

CVE-2022-30311

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures