Advisories

For CVSS 2.0, 3.0 and 3.2
VDE-2024-059
Dec. 3, 2024, 3:00 PM

Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo

An unauthenticated attacker would be able to send crafted requests to cause the CODESYS Gateway Server V2 to allocate excessive memory or consume all available TCP client connections. Besides, passwords …
CVE-2022-31802
CVE-2022-31804
CVE-2022-31803
VDE-2024-055
Nov. 5, 2025, 9:00 AM

Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products contains a memory protection bypass vulnerability

Siemens SIMATIC S7-1200 and S7-1500 CPUs contained in various Festo Didactic products contain a memory protection bypass vulnerability that could allow an attacker to write arbitrary data and code to …
CVE-2020-15782
VDE-2023-065
Dec. 8, 2025, 8:00 AM

Several Vulnerabilities in MES PC (Windows 10)

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time …
CVE-2019-9641
CVE-2018-12882
CVE-2021-21708
CVE-2019-9023
CVE-2016-3078
CVE-2023-25690
CVE-2019-9021
CVE-2014-9705
CVE-2019-9020
CVE-2015-2348
CVE-2015-2787
CVE-2019-9025
CVE-2019-11043
CVE-2015-2301
CVE-2019-11049
CVE-2019-11040
CVE-2020-7061
CVE-2019-11034
CVE-2020-7060
CVE-2014-9709
CVE-2020-7059
CVE-2019-11035
CVE-2019-11039
CVE-2019-11036
CVE-2022-36760
CVE-2013-6501
CVE-2020-7065
CVE-2022-31626
CVE-2022-31625
CVE-2016-5385
CVE-2023-0568
CVE-2022-27451
CVE-2022-27381
CVE-2022-27380
CVE-2018-19935
CVE-2006-20001
CVE-2022-27378
CVE-2022-32081
CVE-2022-27449
CVE-2019-9024
CVE-2021-21702
CVE-2022-32085
CVE-2022-32086
CVE-2023-27522
CVE-2022-27455
CVE-2022-27456
CVE-2019-9640
CVE-2022-32087
CVE-2022-27383
CVE-2021-46669
CVE-2022-32089
CVE-2023-0662
CVE-2019-9022
CVE-2022-32082
CVE-2022-27448
CVE-2022-27382
CVE-2018-14883
CVE-2022-27444
CVE-2022-32091
CVE-2022-27385
CVE-2019-9639
CVE-2022-27386
CVE-2022-27446
CVE-2022-27447
CVE-2020-7062
CVE-2019-9637
CVE-2022-27379
CVE-2022-27384
CVE-2022-27457
CVE-2022-27445
CVE-2022-27376
CVE-2022-27387
CVE-2022-27452
CVE-2022-27458
CVE-2019-11044
CVE-2019-9638
CVE-2022-27377
CVE-2022-32088
CVE-2022-32084
CVE-2018-19518
CVE-2022-32083
CVE-2021-2144
CVE-2021-27928
CVE-2019-11041
CVE-2019-11042
CVE-2021-21703
CVE-2020-2780
CVE-2019-11050
CVE-2019-11047
CVE-2022-31629
CVE-2021-21706
CVE-2020-7069
CVE-2023-0567
CVE-2018-17082
CVE-2022-23808
CVE-2021-21704
CVE-2021-2389
CVE-2019-11045
CVE-2021-2011
CVE-2022-4900
CVE-2021-46664
CVE-2021-46662
CVE-2022-31628
CVE-2021-46665
CVE-2021-46661
CVE-2021-46667
CVE-2021-46663
CVE-2018-14851
CVE-2021-35604
CVE-2021-46666
CVE-2020-2760
CVE-2021-46668
CVE-2020-7064
CVE-2023-25727
CVE-2021-21707
CVE-2022-37436
CVE-2019-11048
CVE-2020-7063
CVE-2020-7070
CVE-2019-11046
CVE-2021-21705
CVE-2020-2752
CVE-2020-7071
CVE-2020-2812
CVE-2021-2154
CVE-2021-2180
CVE-2020-2814
CVE-2021-2166
CVE-2021-2194
CVE-2021-2174
CVE-2022-21595
CVE-2021-2022
CVE-2021-2372
CVE-2020-7066
CVE-2022-23807
CVE-2021-2032
CVE-2021-2007
CVE-2020-2922
CVE-2020-7068
VDE-2023-063
Nov. 4, 2025, 12:00 PM

Festo: Multiple products contain CoDe16 vulnerability

Several high severity vulnerabilities in CODESYS V3 affecting Festo products could lead to Remote Code Execution or Denial of Service.
CVE-2022-47379
CVE-2022-47380
CVE-2022-47381
CVE-2022-47382
CVE-2022-47383
CVE-2022-47384
CVE-2022-47385
CVE-2022-47386
CVE-2022-47387
CVE-2022-47388
CVE-2022-47389
CVE-2022-47390
CVE-2022-47391
CVE-2022-47378
CVE-2022-47392
CVE-2022-47393
VDE-2023-036
May 13, 2025, 12:00 PM

Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in several products

A vulnerability in the Wibu CodeMeter Runtime, which is part of the installation packages of several Festo products, was found. An attacker exploiting the vulnerability in WIBU CodeMeter Runtime in …
CVE-2023-3935
VDE-2023-047
Oct. 1, 2025, 8:00 AM

Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products

A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based …
CVE-2023-26293
VDE-2023-020
Oct. 1, 2025, 12:00 PM

Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

Incomplete user documentation of undocumented, authenticated test mode and further remote accessible functions. The supported features may be covered only partly by the corresponding user documentation. Festo developed the products …
CVE-2023-3634
VDE-2023-040
Oct. 1, 2025, 12:00 PM

Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance

A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch …
CVE-2021-23414