CVE:CVE-2022-30308
CNNVD:CNNVD-202206-1158
Festo Controller CECC-X-M1是德国Festo公司的一系列控制器设备。
Festo Controller CECC-X-M1存在操作系统命令注入漏洞。攻击者利用该漏洞以 root 权限执行系统命令。
solution:Upgrade festo controller_cecc-x-m1_firmware to a higher version than 3.8.14,4.0.14,and avoid the version (,3.8.14],4.0.14; Upgrade festo controller_cecc-x-m1-mv_firmware to a higher version than 3.8.14,4.0.14,and avoid the version (,3.8.14],4.0.14; Upgrade festo controller_cecc-x-m1-mv-s1_firmware to a higher version than 3.8.14,4.0.14,and avoid the version (,3.8.14],4.0.14; Upgrade festo controller_cecc-x-m1-ys-l1_firmware to a higher version than 3.8.14,and avoid the version (,3.8.14]; Upgrade festo controller_cecc-x-m1-ys-l2_firmware to a higher version than 3.8.14,and avoid the version (,3.8.14]; Upgrade festo controller_cecc-x-m1-y-yjkp_firmware to a higher version than 3.8.14,and avoid the version (,3.8.14]; Upgrade festo servo_press_kit_yjkp_firmware to a higher version than 3.8.14,and avoid the version (,3.8.14]; Upgrade festo servo_press_kit_yjkp-_firmware to a higher version than 3.8.14,and avoid the version (,3.8.14]