{"id":"CVE-2022-3270","state":"PUBLISHED","title":"Incomplete Documentation of remote functions in FESTO products.","description":"In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented  protocol which could lead to a complete loss of confidentiality, integrity and availability.\n","publishedAt":"2022-12-01T10:27:52.434Z","updatedAt":"2025-04-24T20:05:32.864Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CERTVDE"},"assigner":"CERTVDE","products":["Festo SE Bus module CPX-E-EP","Festo SE Bus node CPX-FB32","Festo SE Bus node CPX-FB33","Festo SE Bus node CPX-FB36","Festo SE Bus node CPX-FB37","Festo SE Bus node CPX-FB39","Festo SE Bus node CPX-FB40","Festo SE Bus node CPX-FB43","Festo SE Bus node CPX-M-FB34","Festo SE Bus node CPX-M-FB35","Festo SE Bus node CPX-M-FB44","Festo SE Bus node CPX-M-FB45","Festo SE Bus node CTEU-EP","Festo SE Bus node CTEU-PN","Festo SE Bus node CTEU-PN-EX1C","Festo SE Camera system CHB-C-N","Festo SE Compact Vision System SBO*-C-*","Festo SE Compact Vision System SBO*-M-*","Festo SE Compact Vision System SBO*-Q-*","Festo SE Control block CPX-CEC","Festo SE Control block CPX-CEC-C1","Festo SE Control block CPX-CEC-C1-V3","Festo SE Control block CPX-CEC-M1","Festo SE Control block CPX-CEC-M1-V3","Festo SE Control block CPX-CEC-S1-V3","Festo SE Control block CPX-CMXX","Festo SE Control block CPX-FEC-1-IE","Festo SE Controller CECC-D","Festo SE Controller CECC-D-BA","Festo SE Controller CECC-LK","Festo SE Controller CECC-S","Festo SE Controller CECC-X-*","Festo SE Controller CECX-X-C1","Festo SE Controller CECX-X-M1","Festo SE Controller CMXH-ST2-C5-7-DIOP","Festo SE Controller CPX-E-CEC-*","Festo SE Controller SBRD-Q","Festo SE EtherNet/IP interface CPX-AP-I-EP-M12","Festo SE EtherNet/IP interface CPX-AP-I-PN-M12","Festo SE Gateway CPX-IOT","Festo SE Integrated drive EMCA-EC-67-*","Festo SE Motor controller CMMO-ST-C5-1-DION","Festo SE Motor controller CMMO-ST-C5-1-DIOP","Festo SE Motor controller CMMO-ST-C5-1-LKP","Festo SE Motor controller CMMP-AS-*","Festo SE Motor controller CMMT-AS-*","Festo SE Operator unit CDPX-X-A-S-10","Festo SE Operator unit CDPX-X-A-W-13","Festo SE Operator unit CDPX-X-A-W-4","Festo SE Operator unit CDPX-X-A-W-7","Festo SE Planar surface gantry EXCM-*","Festo SE Servo drive CMMT-ST-C8-1C-EP-S0","Festo SE Servo drive CMMT-ST-C8-1C-PN-S0","Festo SE VTEM-S1-*","Festo SE Bus module CPX-E-PN"],"affected":[{"vendor":"Festo SE","product":"Bus module CPX-E-EP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB32","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB33","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB36","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB37","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB39","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB40","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB43","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB34","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB35","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB44","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB45","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CTEU-EP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CTEU-PN","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CTEU-PN-EX1C","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Camera system CHB-C-N","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Compact Vision System SBO*-C-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Compact Vision System SBO*-M-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Compact Vision System SBO*-Q-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-C1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-C1-V3","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-M1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-M1-V3","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-S1-V3","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CMXX","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CMXX","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-FEC-1-IE","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-D","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-D-BA","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-LK","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-S","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-X-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECX-X-C1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECX-X-M1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CMXH-ST2-C5-7-DIOP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CPX-E-CEC-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller SBRD-Q","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"EtherNet/IP interface CPX-AP-I-EP-M12","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"EtherNet/IP interface CPX-AP-I-PN-M12","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Gateway CPX-IOT","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Integrated drive EMCA-EC-67-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMO-ST-C5-1-DION","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMO-ST-C5-1-DIOP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMO-ST-C5-1-LKP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMP-AS-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMT-AS-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-S-10","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-W-13","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-W-4","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-W-7","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Planar surface gantry EXCM-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Servo drive CMMT-ST-C8-1C-EP-S0","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Servo drive CMMT-ST-C8-1C-PN-S0","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"VTEM-S1-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus module CPX-E-PN","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]}],"references":["https://cert.vde.com/en/advisories/VDE-2022-041/"],"weaknesses":["CWE-1059"],"ingestedAt":"2026-10-29T19:50:32.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/3xxx/CVE-2022-3270.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-3270","state":"PUBLISHED","datePublished":"2022-12-01T10:27:52.434Z","dateUpdated":"2025-04-24T20:05:32.864Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","requesterUserId":"a1e5283b-8f0d-401e-98b2-bc6219c0e8d1","dateReserved":"2022-09-22T08:52:13.296Z"},"containers":{"cna":{"title":"Incomplete Documentation of remote functions in FESTO products.","descriptions":[{"lang":"en","value":"In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented  protocol which could lead to a complete loss of confidentiality, integrity and availability.\n"}],"affected":[{"vendor":"Festo SE","product":"Bus module CPX-E-EP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB32","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB33","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB36","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB37","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB39","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB40","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-FB43","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB34","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB35","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB44","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CPX-M-FB45","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CTEU-EP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CTEU-PN","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus node CTEU-PN-EX1C","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Camera system CHB-C-N","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Compact Vision System SBO*-C-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Compact Vision System SBO*-M-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Compact Vision System SBO*-Q-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-C1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-C1-V3","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-M1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-M1-V3","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CEC-S1-V3","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CMXX","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-CMXX","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Control block CPX-FEC-1-IE","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-D","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-D-BA","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-LK","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-S","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECC-X-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECX-X-C1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CECX-X-M1","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CMXH-ST2-C5-7-DIOP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller CPX-E-CEC-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Controller SBRD-Q","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"EtherNet/IP interface CPX-AP-I-EP-M12","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"EtherNet/IP interface CPX-AP-I-PN-M12","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Gateway CPX-IOT","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Integrated drive EMCA-EC-67-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMO-ST-C5-1-DION","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMO-ST-C5-1-DIOP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMO-ST-C5-1-LKP","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMP-AS-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Motor controller CMMT-AS-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-S-10","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-W-13","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-W-4","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Operator unit CDPX-X-A-W-7","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Planar surface gantry EXCM-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Servo drive CMMT-ST-C8-1C-EP-S0","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Servo drive CMMT-ST-C8-1C-PN-S0","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"VTEM-S1-*","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]},{"vendor":"Festo SE","product":"Bus module CPX-E-PN","defaultStatus":"affected","versions":[{"version":"all","status":"affected"}]}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-041/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1059","description":"CWE-1059  Incomplete Documentation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateUpdated":"2022-12-13T09:12:44.661Z"},"datePublic":"2022-11-29T12:02:00.000Z","impacts":[{"capecId":"CAPEC-166","descriptions":[{"lang":"en","value":"CAPEC-166 Force the System to Reset Values"}]}],"source":{"advisory":"VDE-2022-041","defect":["CERT@VDE#64162"],"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-041/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T01:07:06.476Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-24T20:05:18.903206Z","id":"CVE-2022-3270","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-24T20:05:32.864Z"}}]}}}