CVE-2014-0769
HighSummary
The Festo CECX-X-C1 and CECX-X-M1 Modular Controllers with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, allowing remote attackers to modify the configuration or delete log entries.
Risk Assessment
The lack of authentication on these ports poses a serious risk to system integrity, enabling unauthorized access to critical functions by attackers.
Recommendation
It is recommended to configure authentication for connections on ports 4000 and 4001 and to monitor access to these services.
Other vulnerabilities in Festo CECX-X-C1 Modular Master Controller, Festo CECX-X-M1 Modular Controller
Original NVD description (English source)
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.