CVE-2014-0760
HighSummary
The Festo CECX-X-C1 and CECX-X-M1 Modular Controllers with CoDeSys and SoftMotion have an undocumented access method via the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause an application crash.
Risk Assessment
The risk to the organization includes the potential for remote code execution, which could lead to serious security incidents and system downtime.
Recommendation
It is recommended to restrict access to the FTP protocol and implement additional security measures to minimize the risk of unauthorized access.
Other vulnerabilities in Festo CECX-X-C1 Modular Master Controller, Festo CECX-X-M1 Modular Controller
Original NVD description (English source)
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which could allow a remote attacker to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.