CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 02:05.
Filter
1 aktiv1 Advisories gefunden
FSA-202208
Festo: Multiple Festo products contain an unsafe default Codesys configuration
Veröffentlicht
29. November 2022
Letzte Aktualisierung
28. Oktober 2025
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
The products are shipped with an unsafe configuration of the integrated CODESYS Runtime environment. In this case no default password is set to the CODESYS PLC and therefore access without authentication is possible. With a successful established connection to the CODESYS Runtime the PLC-Browser commands are available. Thus granting the possibilities to e.g. read and modify the configuration file(s), start/stop the application and reboot the device.
Zusammenfassung der Gegenmaßnahmen
Festo has identified the following compensatory measures to reduce the risk: - For CVE-2022-22515: Using the online user management prevents an attacker from downloading and execute malicious code, but also suppresses start, stop, debug, or other actions on a known working application that could potentially disrupt a machine or system.
Revisionshistorie (3)
Erstveröffentlichung — 29. November 2022
Initial revision.
Update A — 11. Januar 2024
Adjust link to VDE Advisory
Update B — 28. Oktober 2025
Adjusted to VDE template. Changed title from "Multiple Festo products contain an unsafe default Codesys configuration" to "Festo: Multiple Festo products contain an unsafe default Codesys configuration". Updated legal disclaimer to add references to special provisions.