Incomplete Documentation of remote functions in FESTO products.

Summary

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.

Timeline

1. Dec 1, 2022, 10:27 AM UTCCVE published
2. Apr 24, 2025, 8:05 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Apr 24, 2025, 8:05 PM UTCRecord last updated

Affected versions

• Festo SE Bus module CPX-E-EP

  All versions

• Festo SE Bus node CPX-FB32

  All versions

• Festo SE Bus node CPX-FB33

  All versions

• Festo SE Bus node CPX-FB36

  All versions

• Festo SE Bus node CPX-FB37

  All versions

• Festo SE Bus node CPX-FB39

  All versions

• Festo SE Bus node CPX-FB40

  All versions

• Festo SE Bus node CPX-FB43

  All versions

• Festo SE Bus node CPX-M-FB34

  All versions

• Festo SE Bus node CPX-M-FB35

  All versions

• Festo SE Bus node CPX-M-FB44

  All versions

• Festo SE Bus node CPX-M-FB45

  All versions

• Festo SE Bus node CTEU-EP

  All versions

• Festo SE Bus node CTEU-PN

  All versions

• Festo SE Bus node CTEU-PN-EX1C

  All versions

• Festo SE Camera system CHB-C-N

  All versions

• Festo SE Compact Vision System SBO*-C-*

  All versions

• Festo SE Compact Vision System SBO*-M-*

  All versions

• Festo SE Compact Vision System SBO*-Q-*

  All versions

• Festo SE Control block CPX-CEC

  All versions

• Festo SE Control block CPX-CEC-C1

  All versions

• Festo SE Control block CPX-CEC-C1-V3

  All versions

• Festo SE Control block CPX-CEC-M1

  All versions

• Festo SE Control block CPX-CEC-M1-V3

  All versions

• Festo SE Control block CPX-CEC-S1-V3

  All versions

• Festo SE Control block CPX-CMXX

  All versions

• Festo SE Control block CPX-CMXX

  All versions

• Festo SE Control block CPX-FEC-1-IE

  All versions

• Festo SE Controller CECC-D

  All versions

• Festo SE Controller CECC-D-BA

  All versions

• Festo SE Controller CECC-LK

  All versions

• Festo SE Controller CECC-S

  All versions

• Festo SE Controller CECC-X-*

  All versions

• Festo SE Controller CECX-X-C1

  All versions

• Festo SE Controller CECX-X-M1

  All versions

• Festo SE Controller CMXH-ST2-C5-7-DIOP

  All versions

• Festo SE Controller CPX-E-CEC-*

  All versions

• Festo SE Controller SBRD-Q

  All versions

• Festo SE EtherNet/IP interface CPX-AP-I-EP-M12

  All versions

• Festo SE EtherNet/IP interface CPX-AP-I-PN-M12

  All versions

• Festo SE Gateway CPX-IOT

  All versions

• Festo SE Integrated drive EMCA-EC-67-*

  All versions

• Festo SE Motor controller CMMO-ST-C5-1-DION

  All versions

• Festo SE Motor controller CMMO-ST-C5-1-DIOP

  All versions

• Festo SE Motor controller CMMO-ST-C5-1-LKP

  All versions

• Festo SE Motor controller CMMP-AS-*

  All versions

• Festo SE Motor controller CMMT-AS-*

  All versions

• Festo SE Operator unit CDPX-X-A-S-10

  All versions

• Festo SE Operator unit CDPX-X-A-W-13

  All versions

• Festo SE Operator unit CDPX-X-A-W-4

  All versions

• Festo SE Operator unit CDPX-X-A-W-7

  All versions

• Festo SE Planar surface gantry EXCM-*

  All versions

• Festo SE Servo drive CMMT-ST-C8-1C-EP-S0

  All versions

• Festo SE Servo drive CMMT-ST-C8-1C-PN-S0

  All versions

• Festo SE VTEM-S1-*

  All versions

• Festo SE Bus module CPX-E-PN

  All versions

References 1