CVE-2022-3270

high-risk
Published 2022-12-01

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.

Do I need to act?

-
0.95% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (20)

Bus Module Cpx-E-Ep Firmware
Bus Node Cpx-Fb32 Firmware
Bus Node Cpx-Fb33 Firmware
Bus Node Cpx-Fb36 Firmware
Bus Node Cpx-Fb37 Firmware
Bus Node Cpx-Fb39 Firmware
Bus Node Cpx-Fb40 Firmware
Bus Node Cpx-Fb43 Firmware
Bus Node Cpx-M-Fb34 Firmware
Bus Node Cpx-M-Fb35 Firmware
Bus Node Cpx-M-Fb44 Firmware
Bus Node Cpx-M-Fb45 Firmware
Bus Node Cteu-Ep Firmware
Bus Node Cteu-Pn Firmware
Bus Node Cteu-Pn-Ex1C Firmware
Camera System Chb-C-N Firmware
Cecx-X-C1 Modular Master Controller Firmware
Cecx-X-M1 Modular Controller Firmware
Compact Vision System Sboc-C Firmware
Compact Vision System Sboc-M Firmware

Affected Vendors

Festo

References (2)

Third Party Advisory https://cert.vde.com/en/advisories/VDE-2022-041/
Third Party Advisory https://cert.vde.com/en/advisories/VDE-2022-041/
65
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 3/34 · Minimal
Exposure 30/34 · Critical