Description (CNA)
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Festo / MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD | affected * |
| Festo / MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L5-AGD | affected * |
| Festo / MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L4-MQ1-AGD | affected * |
| Festo / MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L5-MQ1-AGD | affected * |
| Festo / MSE6-C2M-5000-FB44-D-M-RG-BAR-AMI-AGD | affected * |
| Festo / MSE6-C2M-5000-FB44-D-RG-BAR-AMI-AGD | affected * |
| Festo / MSE6-D2M-5000-CBUS-S-RG-BAR-VCB-AGD | affected * |
| Festo / MSE6-E2M-5000-FB13-AGD | affected * |
| Festo / MSE6-E2M-5000-FB36-AGD | affected * |
| Festo / MSE6-E2M-5000-FB37-AGD | affected * |
| Festo / MSE6-E2M-5000-FB43-AGD | affected * |
| Festo / MSE6-E2M-5000-FB44-AGD | affected * |
CWE
CWE-1242
References
- https://certvde.com/de/advisories/VDE-2023-020/
- https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2023/fsa-202304.json
ADP enrichment
No English description supplied.
No references supplied.