CVE-2023-3634: Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

Published Apr 16, 2026
·
Updated

In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.

Affected Software

3 affected components
Festo MSE6-C2M
Festo MSE6-D2M
Festo MSE6-E2M

Event History

Apr 16, 2026
CVE Published
via MITRE·04:40 AM
Data Sourced
via MITRE·04:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2023-3634?

CVE-2023-3634 is classified as a high severity vulnerability due to the potential complete loss of confidentiality and integrity.

2

How do I fix CVE-2023-3634?

To mitigate CVE-2023-3634, ensure that remote access features are properly documented and that users are trained on securely managing remote authenticated sessions.

3

Which products are affected by CVE-2023-3634?

CVE-2023-3634 affects Festo's MSE6 product family including MSE6-C2M, MSE6-D2M, and MSE6-E2M models.

4

What type of attacker can exploit CVE-2023-3634?

CVE-2023-3634 can be exploited by remote authenticated, low privileged attackers who can access undocumented test mode functions.

5

What are the potential consequences of exploiting CVE-2023-3634?

Exploiting CVE-2023-3634 can lead to a complete loss of confidentiality, integrity, and availability of the affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203