VULNERABILITY INTELLIGENCE
CVE-2014-0760
CVSS score9.3 HIGH
EPSS probability3.35%
CISA KEVNot currently listed
Published2014-04-25
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource