What is CVE-2022-3079?

CVE-2022-3079 is a high-severity vulnerability in Festo Control Block Cpx-Cec-C1 (No. 567347), classified under Improper Privilege Management. CVSS score: 7.5/10. Published 2022-09-20.

How severe is CVE-2022-3079?

High severity. CVSS v3 base score is 7.5 out of 10.

Privilege escalation in Festo Control Block Cpx-Cec-C1 (No. 567347)

CVE-2022-3079

Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.

Vulnerability class: Privilege Escalation

EPSS: 0.007 (49.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Festo Control Block Cpx-cec-c1 (No. 567347) — versions 0.0.1
Festo Control Block Cpx-cmxx (No. 555667) — versions 0.0.1
Festo Cpx-cec-c1
Festo Cpx-cec-c1_firmware
Festo Cpx-cmxx
Festo Cpx-cmxx_firmware

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

info@cert.vde.com (x_refsource_CONFIRM, Third Party Advisory, Mitigation)

Frequently asked questions

What is CVE-2022-3079?: CVE-2022-3079 is a high-severity vulnerability in Festo Control Block Cpx-Cec-C1 (No. 567347), classified under Improper Privilege Management. CVSS score: 7.5/10. Published 2022-09-20.
How severe is CVE-2022-3079?: High severity. CVSS v3 base score is 7.5 out of 10.