CVE-2014-0769
First published: Fri Apr 25 2014(Updated: )
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Softmotion3d Softmotion | ||
| Festo Cecx-x-m1 Modular Controller | ||
| 3s-software Codesys Runtime System | ||
| Festo CECX-X-C1 Modular Master Controller |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/author
- agent/last-modified-date
- agent/tags
- agent/weakness
- agent/description
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/severity
- collector/mitre-cve
- source/MITRE
- vendor/softmotion3d
- canonical/softmotion3d softmotion
- vendor/festo
- canonical/festo cecx-x-m1 modular controller
- vendor/3s-software
- canonical/3s-software codesys runtime system
- canonical/festo cecx-x-c1 modular master controller