CVE-2022-3079

—

CVSS 3.1

7.5 high

EPSS

<1%p51

Published

Sep 20, 2022 (Sep 20, 2022)

Modified

Jun 17, 2026

Description

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.

Vendors: festo
Products: cpx-cmxx firmware, cpx-cec-c1 firmware
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news3 stories

Vulnerabilities found affecting OT products from German companies Festo and CODESYS

The RecordJan 9, 00:00 UTC · Jan 9, 2023Vulnerability CVE-2022-3079 CVE-2022-3270 CVE-2022-4048+2 CVEs

3 New Vulnerabilities Affect OT Products from German Companies Festo and CODESYS

The Hacker NewsNov 30, 09:41 UTC · Nov 30, 2022Vulnerability CVE-2022-3270 CVE-2022-3079 CVE-2022-4048+2 CVEs

New

Infosecurity MagazineNov 30, 09:30 UTC · Nov 30, 2022Vulnerability CVE-2022-4048 CVE-2022-3079 CVE-2022-3270