Unrated severityNVD Advisory· Published Apr 25, 2014· Updated May 6, 2026
CVE-2014-0769
CVE-2014-0769
Description
The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to (1) modify the configuration via a request to the debug service on port 4000 or (2) delete log entries via a request to the log service on port 4001.
Affected products
5- cpe:2.3:a:3s-software:codesys_runtime_system:-:*:*:*:*:*:*:*
- cpe:2.3:a:softmotion3d:softmotion:-:*:*:*:*:*:*:*
- cpe:2.3:h:festo:cecx-x-c1_modular_master_controller:-:*:*:*:*:*:*:*
- cpe:2.3:h:festo:cecx-x-m1_modular_controller:-:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- ics-cert.us-cert.gov/advisories/ICSA-14-084-01nvdUS Government Resource
- www.cisa.gov/news-events/ics-advisories/icsa-14-084-01nvd
News mentions
0No linked articles in our index yet.