CVE-2022-3270: Incomplete Documentation of remote functions in FESTO products.

Published Dec 1, 2022
·
Updated

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.

Affected Software

198 affected components
Festo Bus Module Cpx-e-ep Firmware
Festo Bus Module Cpx-e-ep
Festo Bus Node Cpx-fb32 Firmware
Festo Bus Node Cpx-fb32
Festo Bus Node Cpx-fb33 Firmware
Festo Bus Node Cpx-fb33
Festo Bus Node Cpx-fb36 Firmware
Festo Bus Node Cpx-fb36
Festo Bus Node Cpx-fb37 Firmware
Festo Bus Node Cpx-fb37
Festo Bus Node Cpx-fb39 Firmware
Festo Bus Node Cpx-fb39
Festo Bus Node Cpx-fb40 Firmware
Festo Bus Node Cpx-fb40
Festo Bus Node Cpx-fb43 Firmware
Festo Bus Node Cpx-fb43
Festo Bus Node Cpx-m-fb34 Firmware
Festo Bus Node Cpx-m-fb34
Festo Bus Node Cpx-m-fb35 Firmware
Festo Bus Node Cpx-m-fb35
Festo Bus Node Cpx-m-fb44 Firmware
Festo Bus Node Cpx-m-fb44
Festo Bus Node Cpx-m-fb45 Firmware
Festo Bus Node Cpx-m-fb45
Festo Bus Node Cteu-ep Firmware
Festo Bus Node Cteu-ep
Festo Bus Node Cteu-pn Firmware
Festo Bus Node Cteu-pn
Festo Bus Node Cteu-pn-ex1c Firmware
Festo Bus Node Cteu-pn-ex1c
Festo Camera System Chb-c-n Firmware
Festo Camera System Chb-c-n
Festo Cecx-x-c1 Modular Master Controller Firmware
Festo CECX-X-C1 Modular Master Controller
Festo Cecx-x-m1 Modular Controller Firmware
Festo CECX-X-M1 Modular Controller
Festo Compact Vision System Sboc-c Firmware
Festo Compact Vision System Sboc-c
Festo Compact Vision System Sboc-m Firmware
Festo Compact Vision System Sboc-m
Festo Compact Vision System Sboc-q Firmware
Festo Compact Vision System Sboc-q
Festo Compact Vision System Sboi-c Firmware
Festo Compact Vision System Sboi-c
Festo Compact Vision System Sboi-m Firmware
Festo Compact Vision System Sboi-m
Festo Compact Vision System Sboi-q Firmware
Festo Compact Vision System Sboi-q
Festo Control Block Cpx-cec Firmware
Festo Control Block Cpx-cec
Festo Control Block Cpx-cec-c1 Firmware
Festo Control Block Cpx-cec-c1
Festo Control Block Cpx-cec-c1-v3 Firmware
Festo Control Block Cpx-cec-c1-v3
Festo Control Block Cpx-cec-m1 Firmware
Festo Control Block Cpx-cec-m1
Festo Control Block Cpx-cec-m1-v3 Firmware
Festo Control Block Cpx-cec-m1-v3
Festo Control Block Cpx-cec-s1-v3 Firmware
Festo Control Block Cpx-cec-s1-v3
Festo Control Block Cpx-cmxx Firmware
Festo Control Block Cpx-cmxx
Festo Control Block Cpx-fec-1-ie Firmware
Festo Control Block Cpx-fec-1-ie
Festo Controller Cecc-d Firmware
Festo Controller Cecc-d
Festo Controller Cecc-d-ba Firmware
Festo Controller Cecc-d-ba
Festo Controller Cecc-lk Firmware
Festo Controller Cecc-lk
Festo Controller Cecc-s Firmware
Festo Controller Cecc-s
Festo Controller Cecc-x-m1 Firmware
Festo Controller CECC-X-M1
Festo Controller Cecc-x-m1-mv Firmware
Festo Controller Cecc-x-m1-mv
Festo Controller Cecc-x-m1-mv-s1 Firmware
Festo Controller Cecc-x-m1-mv-s1
Festo Controller Cecc-x-m1-y-yjkp Firmware
Festo Controller Cecc-x-m1-y-yjkp
Festo Controller Cecc-x-m1-ys-l1 Firmware
Festo Controller Cecc-x-m1-ys-l1
Festo Controller Cecc-x-m1-ys-l2 Firmware
Festo Controller Cecc-x-m1-ys-l2
Festo Controller Cmxh-st2-c5-7-diop Firmware
Festo Controller Cmxh-st2-c5-7-diop
Festo Controller Sbrd-q Firmware
Festo Controller Sbrd-q
Festo Ethernet\/ip Interface Cpx-ap-i-ep-m12 Firmware
Festo Ethernet\/ip Interface Cpx-ap-i-ep-m12
Festo Ethernet\/ip Interface Cpx-ap-i-pn-m12 Firmware
Festo Ethernet\/ip Interface Cpx-ap-i-pn-m12
Festo Gateway Cpx-iot Firmware
Festo Gateway Cpx-iot
Festo Integrated Drive Emca-ec-67 Firmware
Festo Integrated Drive Emca-ec-67
Festo Integrated Drive Emca-ec-67-m-1te-ep Firmware
Festo Integrated Drive Emca-ec-67-m-1te-ep
Festo Motor Controller Cmmo-st-c5-1-dion Firmware
Festo Motor Controller Cmmo-st-c5-1-dion
Festo Motor Controller Cmmo-st-c5-1-diop Firmware
Festo Motor Controller Cmmo-st-c5-1-diop
Festo Motor Controller Cmmo-st-c5-1-lkp Firmware
Festo Motor Controller Cmmo-st-c5-1-lkp
Festo Motor Controller Cmmp-as-c10-11a-p3-m0 Firmware
Festo Motor Controller Cmmp-as-c10-11a-p3-m0
Festo Motor Controller Cmmp-as-c10-11a-p3-m3 Firmware
Festo Motor Controller Cmmp-as-c10-11a-p3-m3
Festo Motor Controller Cmmp-as-c15-11a-p3-m3 Firmware
Festo Motor Controller Cmmp-as-c15-11a-p3-m3
Festo Motor Controller Cmmp-as-c2-3a-m0 Firmware
Festo Motor Controller Cmmp-as-c2-3a-m0
Festo Motor Controller Cmmp-as-c2-3a-m3 Firmware
Festo Motor Controller Cmmp-as-c2-3a-m3
Festo Motor Controller Cmmp-as-c5-11a-p3-m0 Firmware
Festo Motor Controller Cmmp-as-c5-11a-p3-m0
Festo Motor Controller Cmmp-as-c5-11a-p3-m3 Firmware
Festo Motor Controller Cmmp-as-c5-11a-p3-m3
Festo Motor Controller Cmmp-as-c5-3a-m0 Firmware
Festo Motor Controller Cmmp-as-c5-3a-m0
Festo Motor Controller Cmmp-as-c5-3a-m3 Firmware
Festo Motor Controller Cmmp-as-c5-3a-m3
Festo Operator Unit Cdpx-x-a-s-10 Firmware
Festo Operator Unit Cdpx-x-a-s-10
Festo Operator Unit Cdpx-x-a-w-13 Firmware
Festo Operator Unit Cdpx-x-a-w-13
Festo Operator Unit Cdpx-x-a-w-4 Firmware
Festo Operator Unit Cdpx-x-a-w-4
Festo Operator Unit Cdpx-x-a-w-7 Firmware
Festo Operator Unit Cdpx-x-a-w-7
Festo Planar Surface Gantry Excm-30 Firmware
Festo Planar Surface Gantry Excm-30
Festo Planar Surface Gantry Excm-40 Firmware
Festo Planar Surface Gantry Excm-40
Festo Servo Cmmt-as-c12-11a-p3-ec-s1 Firmware
Festo Servo Cmmt-as-c12-11a-p3-ec-s1
Festo Servo Cmmt-as-c12-11a-p3-ep-s1 Firmware
Festo Servo Cmmt-as-c12-11a-p3-ep-s1
Festo Servo Cmmt-as-c12-11a-p3-mp-s1 Firmware
Festo Servo Cmmt-as-c12-11a-p3-mp-s1
Festo Servo Cmmt-as-c12-11a-p3-pn-s1 Firmware
Festo Servo Cmmt-as-c12-11a-p3-pn-s1
Festo Servo Cmmt-as-c2-11a-p3-ec-s1 Firmware
Festo Servo Cmmt-as-c2-11a-p3-ec-s1
Festo Servo Cmmt-as-c2-11a-p3-ep-s1 Firmware
Festo Servo Cmmt-as-c2-11a-p3-ep-s1
Festo Servo Cmmt-as-c2-11a-p3-mp-s1 Firmware
Festo Servo Cmmt-as-c2-11a-p3-mp-s1
Festo Servo Cmmt-as-c2-11a-p3-pn-s1 Firmware
Festo Servo Cmmt-as-c2-11a-p3-pn-s1
Festo Servo Cmmt-as-c2-3a-ec-s1 Firmware
Festo Servo Cmmt-as-c2-3a-ec-s1
Festo Servo Cmmt-as-c2-3a-ep-s1 Firmware
Festo Servo Cmmt-as-c2-3a-ep-s1
Festo Servo Cmmt-as-c2-3a-mp-s1 Firmware
Festo Servo Cmmt-as-c2-3a-mp-s1
Festo Servo Cmmt-as-c2-3a-pn-s1 Firmware
Festo Servo Cmmt-as-c2-3a-pn-s1
Festo Servo Cmmt-as-c3-11a-p3-ec-s1 Firmware
Festo Servo Cmmt-as-c3-11a-p3-ec-s1
Festo Servo Cmmt-as-c3-11a-p3-ep-s1 Firmware
Festo Servo Cmmt-as-c3-11a-p3-ep-s1
Festo Servo Cmmt-as-c3-11a-p3-mp-s1 Firmware
Festo Servo Cmmt-as-c3-11a-p3-mp-s1
Festo Servo Cmmt-as-c3-11a-p3-pn-s1 Firmware
Festo Servo Cmmt-as-c3-11a-p3-pn-s1
Festo Servo Cmmt-as-c4-3a-ec-s1 Firmware
Festo Servo Cmmt-as-c4-3a-ec-s1
Festo Servo Cmmt-as-c4-3a-ep-s1 Firmware
Festo Servo Cmmt-as-c4-3a-ep-s1
Festo Servo Cmmt-as-c4-3a-mp-s1 Firmware
Festo Servo Cmmt-as-c4-3a-mp-s1
Festo Servo Cmmt-as-c4-3a-pn-s1 Firmware
Festo Servo Cmmt-as-c4-3a-pn-s1
Festo Servo Cmmt-as-c5-11a-p3-ec-s1 Firmware
Festo Servo Cmmt-as-c5-11a-p3-ec-s1
Festo Servo Cmmt-as-c5-11a-p3-ep-s1 Firmware
Festo Servo Cmmt-as-c5-11a-p3-ep-s1
Festo Servo Cmmt-as-c5-11a-p3-mp-s1 Firmware
Festo Servo Cmmt-as-c5-11a-p3-mp-s1
Festo Servo Cmmt-as-c5-11a-p3-pn-s1 Firmware
Festo Servo Cmmt-as-c5-11a-p3-pn-s1
Festo Servo Cmmt-as-c7-11a-p3-ec-s1 Firmware
Festo Servo Cmmt-as-c7-11a-p3-ec-s1
Festo Servo Cmmt-as-c7-11a-p3-ep-s1 Firmware
Festo Servo Cmmt-as-c7-11a-p3-ep-s1
Festo Servo Cmmt-as-c7-11a-p3-mp-s1 Firmware
Festo Servo Cmmt-as-c7-11a-p3-mp-s1
Festo Servo Cmmt-as-c7-11a-p3-pn-s1 Firmware
Festo Servo Cmmt-as-c7-11a-p3-pn-s1
Festo Servo Drive Cmmt-st-c8-1c-ep-s0 Firmware
Festo Servo Drive Cmmt-st-c8-1c-ep-s0
Festo Servo Drive Cmmt-st-c8-1c-pn-s0 Firmware
Festo Servo Drive Cmmt-st-c8-1c-pn-s0
Festo Vtem-s1-27 Firmware
Festo Vtem-s1-27
Festo Vtem-s1-c Firmware
Festo Vtem-s1-c

Event History

Dec 1, 2022
CVE Published
via MITRE·10:27 AM
Data Sourced
via MITRE·10:27 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2022-3270?

CVE-2022-3270 is considered highly severe as it could lead to complete loss of confidentiality, integrity, and availability due to exploitation by unauthenticated remote attackers.

2

How do I fix CVE-2022-3270?

To mitigate the risks associated with CVE-2022-3270, it is recommended to update affected Festo products to the latest firmware version that addresses the vulnerability.

3

Which products are affected by CVE-2022-3270?

CVE-2022-3270 affects multiple Festo products, including various firmware versions of the bus module cpx-e-ep, bus node models, camera system, and several controllers.

4

What kind of attacks can exploit CVE-2022-3270?

An attacker could exploit CVE-2022-3270 using functions of an undocumented protocol to gain unauthorized access to affected Festo devices.

5

Is CVE-2022-3270 exploitable without authentication?

Yes, CVE-2022-3270 is exploitable by unauthenticated attackers, making it particularly concerning for security.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203