CVE-2022-3270 Incomplete Documentation of remote functions in FESTO products.
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented  protocol which could lead to a complete loss of confidentiality, integrity and availability.

Problem types: cwe_id: CWE-1059
description: CWE-1059  Incomplete Documentation
Affected products: vendor: Festo SE
product: Bus module CPX-E-EP
default_status: affected
vendor: Festo SE
product: Bus node CPX-FB32
default_status: affected
vendor: Festo SE
product: Bus node CPX-FB33
default_status: affected
vendor: Festo SE
product: Bus node CPX-FB36
default_status: affected
vendor: Festo SE
product: Bus node CPX-FB37
default_status: affected
vendor: Festo SE
product: Bus node CPX-FB39
default_status: affected
vendor: Festo SE
product: Bus node CPX-FB40
default_status: affected
vendor: Festo SE
product: Bus node CPX-FB43
default_status: affected
vendor: Festo SE
product: Bus node CPX-M-FB34
default_status: affected
vendor: Festo SE
product: Bus node CPX-M-FB35
default_status: affected
vendor: Festo SE
product: Bus node CPX-M-FB44
default_status: affected
vendor: Festo SE
product: Bus node CPX-M-FB45
default_status: affected
vendor: Festo SE
product: Bus node CTEU-EP
default_status: affected
vendor: Festo SE
product: Bus node CTEU-PN
default_status: affected
vendor: Festo SE
product: Bus node CTEU-PN-EX1C
default_status: affected
vendor: Festo SE
product: Camera system CHB-C-N
default_status: affected
vendor: Festo SE
product: Compact Vision System SBO*-C-*
default_status: affected
vendor: Festo SE
product: Compact Vision System SBO*-M-*
default_status: affected
vendor: Festo SE
product: Compact Vision System SBO*-Q-*
default_status: affected
vendor: Festo SE
product: Control block CPX-CEC
default_status: affected
vendor: Festo SE
product: Control block CPX-CEC-C1
default_status: affected
vendor: Festo SE
product: Control block CPX-CEC-C1-V3
default_status: affected
vendor: Festo SE
product: Control block CPX-CEC-M1
default_status: affected
vendor: Festo SE
product: Control block CPX-CEC-M1-V3
default_status: affected
vendor: Festo SE
product: Control block CPX-CEC-S1-V3
default_status: affected
vendor: Festo SE
product: Control block CPX-CMXX
default_status: affected
vendor: Festo SE
product: Control block CPX-CMXX
default_status: affected
vendor: Festo SE
product: Control block CPX-FEC-1-IE
default_status: affected
vendor: Festo SE
product: Controller CECC-D
default_status: affected
vendor: Festo SE
product: Controller CECC-D-BA
default_status: affected
vendor: Festo SE
product: Controller CECC-LK
default_status: affected
vendor: Festo SE
product: Controller CECC-S
default_status: affected
vendor: Festo SE
product: Controller CECC-X-*
default_status: affected
vendor: Festo SE
product: Controller CECX-X-C1
default_status: affected
vendor: Festo SE
product: Controller CECX-X-M1
default_status: affected
vendor: Festo SE
product: Controller CMXH-ST2-C5-7-DIOP
default_status: affected
vendor: Festo SE
product: Controller CPX-E-CEC-*
default_status: affected
vendor: Festo SE
product: Controller SBRD-Q
default_status: affected
vendor: Festo SE
product: EtherNet/IP interface CPX-AP-I-EP-M12
default_status: affected
vendor: Festo SE
product: EtherNet/IP interface CPX-AP-I-PN-M12
default_status: affected
vendor: Festo SE
product: Gateway CPX-IOT
default_status: affected
vendor: Festo SE
product: Integrated drive EMCA-EC-67-*
default_status: affected
vendor: Festo SE
product: Motor controller CMMO-ST-C5-1-DION
default_status: affected
vendor: Festo SE
product: Motor controller CMMO-ST-C5-1-DIOP
default_status: affected
vendor: Festo SE
product: Motor controller CMMO-ST-C5-1-LKP
default_status: affected
vendor: Festo SE
product: Motor controller CMMP-AS-*
default_status: affected
vendor: Festo SE
product: Motor controller CMMT-AS-*
default_status: affected
vendor: Festo SE
product: Operator unit CDPX-X-A-S-10
default_status: affected
vendor: Festo SE
product: Operator unit CDPX-X-A-W-13
default_status: affected
vendor: Festo SE
product: Operator unit CDPX-X-A-W-4
default_status: affected
vendor: Festo SE
product: Operator unit CDPX-X-A-W-7
default_status: affected
vendor: Festo SE
product: Planar surface gantry EXCM-*
default_status: affected
vendor: Festo SE
product: Servo drive CMMT-ST-C8-1C-EP-S0
default_status: affected
vendor: Festo SE
product: Servo drive CMMT-ST-C8-1C-PN-S0
default_status: affected
vendor: Festo SE
product: VTEM-S1-*
default_status: affected
vendor: Festo SE
product: Bus module CPX-E-PN
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-12-01T10:27:52.434Z