CVE-2023-3634
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.64%
- CWE
- CWE-1242
- Published
- 2026-04-16
- Last modified
- 2026-04-16
Affected products
- Festo MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD
- Festo MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L5-AGD
- Festo MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L4-MQ1-AGD
- Festo MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L5-MQ1-AGD
- Festo MSE6-C2M-5000-FB44-D-M-RG-BAR-AMI-AGD
- Festo MSE6-C2M-5000-FB44-D-RG-BAR-AMI-AGD
- Festo MSE6-D2M-5000-CBUS-S-RG-BAR-VCB-AGD
- Festo MSE6-E2M-5000-FB13-AGD
Weakness type
Related vulnerabilities
- CVE-2025-41756 — Arbitrary Write with ubr-editfile
- CVE-2025-41754 — Arbitrary Read with ubr-editfile
- CVE-2026-24714 — Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic...
- CVE-2021-4469 — Denver SHO-110 IP Camera Unauthenticated Snapshot Access
- CVE-2025-12176 — Undocumented Administrative Accounts
- CVE-2017-20204 — DBLTek GoIP Telnet Admin Interface Undocumented Backdoor
- CVE-2025-55050 — CWE-1242: Inclusion of Undocumented Features
- CVE-2025-52548 — Enabling SSH and Shellinabox on the vulnerable machine