CVE-2022-3270: Incomplete Documentation of remote functions in FESTO products.

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-01 · updated 2026-06-17
Weakness: CWE-1059

Description

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.

Affected products

Festo Bus Module Cpx-E-Ep Firmware: all versions
Festo Bus Node Cpx-Fb32 Firmware: all versions
Festo Bus Node Cpx-Fb33 Firmware: all versions
Festo Bus Node Cpx-Fb36 Firmware: all versions
Festo Bus Node Cpx-Fb37 Firmware: all versions
Festo Bus Node Cpx-Fb39 Firmware: all versions
Festo Bus Node Cpx-Fb40 Firmware: all versions
Festo Bus Node Cpx-Fb43 Firmware: all versions
Festo Bus Node Cpx-M-Fb34 Firmware: all versions
Festo Bus Node Cpx-M-Fb35 Firmware: all versions
Festo Bus Node Cpx-M-Fb44 Firmware: all versions
Festo Bus Node Cpx-M-Fb45 Firmware: all versions
Festo Bus Node Cteu-Ep Firmware: all versions
Festo Bus Node Cteu-Pn-Ex1C Firmware: all versions
Festo Bus Node Cteu-Pn Firmware: all versions
Festo Camera System Chb-C-N Firmware: all versions
Festo Cecx-X-C1 Modular Master Controller Firmware: all versions
Festo Cecx-X-M1 Modular Controller Firmware: all versions
Festo Compact Vision System Sboc-C Firmware: all versions
Festo Compact Vision System Sboc-M Firmware: all versions
Festo Compact Vision System Sboc-Q Firmware: all versions
Festo Compact Vision System Sboi-C Firmware: all versions
Festo Compact Vision System Sboi-M Firmware: all versions
Festo Compact Vision System Sboi-Q Firmware: all versions
Festo Control Block Cpx-Cec-C1-V3 Firmware: all versions
Festo Control Block Cpx-Cec-C1 Firmware: all versions
Festo Control Block Cpx-Cec-M1-V3 Firmware: all versions
Festo Control Block Cpx-Cec-M1 Firmware: all versions
Festo Control Block Cpx-Cec-S1-V3 Firmware: all versions
Festo Control Block Cpx-Cec Firmware: all versions

References

Get alerted when CVE-2022-3270 or the next vulnerability affects your stack