NVD

Id
29630  
Name
CVE-2014-0769  
Description
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-04-25  
Modified Date
2014-04-25  
Seq
2014-0769  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156773 29630 CVE-2014-0769 http://ics-cert.us-cert.gov/advisories/ICSA-14-084-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13381 JVNDB-2014-002256 Festo Modular controllers CECX-X-C1 および CECX-X-M1 における設定を変更される脆弱性 Festo CECX-X-C1 Modular Master Controller with CoDeSys および CECX-X-M1 Modular Controller with CoDeSys and SoftMotion は、特定の TCP ポートの接続に対する認証を要求しないため、設定を変更される、またはログエントリを削除される脆弱性が存在します。 CVE-2014-0769 68170 CVE-2014-0769 29630 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002256.html 2014-04-24 2014-04-28 View