VULNERABILITY INTELLIGENCE

CVE-2022-30310

CVSS score10 HIGH

EPSS probability2.69%

CISA KEVNot currently listed

Published2022-06-13

Last modified2026-06-17

Description

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.