CVE-2023-3634 - Vulnerability Analysis

Overview

Festo MSE6 product-family contains an undocumented test mode vulnerability, letting remote authenticated low privileged attackers cause complete loss of confidentiality, integrity, and availability, exploit requires authentication.

Severity & Score

Impact

Authenticated low privileged attackers can fully compromise confidentiality, integrity, and availability of the system.

Mitigation

Update to the latest version or apply vendor patches addressing undocumented test mode access.

References

• https://certvde.com/de/advisories/VDE-2023-020/
• https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2023/fsa-202304.json

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner