CVE-2022-30311

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: Jun 13, 2022
Source updated: Sep 16, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Controller CECC-X-M1 (4407603)

Vendor: Festo
Product: Controller CECC-X-M1 (4407603)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1 (4407603) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed

Controller CECC-X-M1 (8124922)

Vendor: Festo
Product: Controller CECC-X-M1 (8124922)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1 (8124922) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.0.14	`affected`	Unavailable	Unavailable	Unavailable	None listed

Controller CECC-X-M1-MV (4407605)

Vendor: Festo
Product: Controller CECC-X-M1-MV (4407605)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1-MV (4407605) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed

Controller CECC-X-M1-MV (8124923)

Vendor: Festo
Product: Controller CECC-X-M1-MV (8124923)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1-MV (8124923) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.0.14	`affected`	Unavailable	Unavailable	Unavailable	None listed

Controller CECC-X-M1-MV-S1 (4407606)

Vendor: Festo
Product: Controller CECC-X-M1-MV-S1 (4407606)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1-MV-S1 (4407606) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed

Controller CECC-X-M1-MV-S1 (8124924)

Vendor: Festo
Product: Controller CECC-X-M1-MV-S1 (8124924)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1-MV-S1 (8124924) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.0.14	`affected`	Unavailable	Unavailable	Unavailable	None listed

Controller CECC-X-M1-YS-L1 (8082793)

Vendor: Festo
Product: Controller CECC-X-M1-YS-L1 (8082793)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1-YS-L1 (8082793) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed

Controller CECC-X-M1-YS-L2 (8082794)

Vendor: Festo
Product: Controller CECC-X-M1-YS-L2 (8082794)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1-YS-L2 (8082794) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed

Controller CECC-X-M1-Y-YJKP (4803891)

Vendor: Festo
Product: Controller CECC-X-M1-Y-YJKP (4803891)
Platforms: Unknown
Default status: unaffected

Controller CECC-X-M1-Y-YJKP (4803891) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed

Servo Press Kit YJKP (8077950)

Vendor: Festo
Product: Servo Press Kit YJKP (8077950)
Platforms: Unknown
Default status: unaffected

Servo Press Kit YJKP (8077950) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed

Servo Press Kit YJKP- (8058596)

Vendor: Festo
Product: Servo Press Kit YJKP- (8058596)
Platforms: Unknown
Default status: unaffected

Servo Press Kit YJKP- (8058596) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.0.0	`affected`	custom	Unavailable	3.8.14	None listed