title: Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function
description: Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service.
problem types: CWE-269 Improper Privilege Management
affected:
{
product: Control block CPX-CEC-C1 (no. 567347)
vendor: FESTO
versions:
lessThanOrEqual: 2.0.12, status: affected, version: 0.0.1, versionType: custom
}
{
product: Control block CPX-CMXX (no. 555667)
vendor: FESTO
versions:
lessThanOrEqual: 1.2.34 rev.269404, status: affected, version: 0.0.1, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]