Files
vuln-nvd/data/2022/CVE-2022-3079.json
T

2 lines
3.0 KiB
JSON

{"affected":[{"affectedData":[{"product":"Control block CPX-CEC-C1 (no. 567347)","vendor":"FESTO","versions":[{"lessThanOrEqual":"2.0.12","status":"affected","version":"0.0.1","versionType":"custom"}]},{"product":"Control block CPX-CMXX (no. 555667)","vendor":"FESTO","versions":[{"lessThanOrEqual":"1.2.34 rev.269404","status":"affected","version":"0.0.1","versionType":"custom"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:festo:cpx-cmxx_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2A734858-6728-452C-BEF4-9C638380180D","versionEndIncluding":"2.0.12","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:festo:cpx-cmxx:-:*:*:*:*:*:*:*","matchCriteriaId":"467CCB2B-2FCC-4885-9CD3-52F312FD20B8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:festo:cpx-cec-c1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F1F679EE-D2D0-496D-AB98-70E99F285358","versionEndIncluding":"1.2.34","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:festo:cpx-cec-c1:-:*:*:*:*:*:*:*","matchCriteriaId":"58B42CEE-8A72-4C1D-9951-7E147282718A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Festo control block CPX-CEC-C1 and CPX-CMXX in multiple versions allow unauthenticated, remote access to critical webpage functions which may cause a denial of service."},{"lang":"es","value":"El bloque de control de Festo CPX-CEC-C1 y CPX-CMXX en varias versiones, permite el acceso remoto no autenticado a funciones críticas de la página web que pueden causar una denegación de servicio"}],"id":"CVE-2022-3079","lastModified":"2026-06-17T04:58:47.130","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"info@cert.vde.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-3079","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-05-29T14:09:32.176624Z","version":"2.0.3"}}]},"published":"2022-09-20T10:15:10.587","references":[{"source":"info@cert.vde.com","tags":["Mitigation","Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-036"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-036"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"info@cert.vde.com","type":"Secondary"}]}