Security Advisory

CVE-2022-30311

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-06-13 13:45:24

Last updated 2024-09-16 23:41:46

Assigner CERTVDE

State PUBLISHED

Description

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

← Browse all CVEs View on cve.org ↗