CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:34.
Filters
1 actief1 advisories gevonden
FSA-202207
Festo: CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function
Gepubliceerd
20 september 2022
Laatste update
28 juli 2025
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Unauthenticated access to critical webpage functions (e.g. reboot) may cause a denial of service of the device.
Mitigatiesamenvatting
Currently no fix is planned. Festo recommends limiting access to the webserver (tcp port 80) of the device to what is absolutely necessary. Replace CPX-CEC-C1 with follow-up product CPX-CEC-C1-V3. Replace CPX-CMXX with follow up product CPX-CEC-M1-V3.
Revisiegeschiedenis (4)
Initiële publicatie — 20 september 2022
Initial revision.
Update A — 19 oktober 2022
Added Control block-Set CPX-CEC-C1 and Control block-SET CPX-CMXX to affected products.
Update B — 11 januari 2024
Adjust link to VDE Advisory
Update C — 28 juli 2025
Adjusted to VDE template. Change title from 'CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function' to 'Festo: CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function'. Updated legal disclaimer to add references to special provisions. Remediations were consolidated into one.