Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Festo MSE6 products: Unauthorized access to test mode data

CVE-2023-3634 · published 6 months ago
Summary

Some Festo MSE6 products have a hidden test mode that can be accessed by an authorized user who shouldn't have it. This could potentially allow an attacker to see sensitive information and disrupt system operation. Festo recommends disabling the test mode or updating to the latest software version to prevent unauthorized access.

Original advisory text
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality,...
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-1242Inclusion of Undocumented Features or Chicken Bits
Timeline
Published16 Apr 2026
Updated4 Nov 2026
First seen16 Apr 2026
Sources
CVE-2023-3634 · NVD
Track software like this
Free during beta