Support Portal

Festo AX OS versions 25.0.1.46 and 25.9.2.4, which are based on PLCnext by Phoenix Contact, used by the Festo product CEPE are affected by multiple OpenSSL vulnerabilities. The vulnerabilities are identified as CVE-2025-15467 and CVE-2025-69419. Attacks may be possible when maliciously crafted firmware, key files, PKCS#12 files, CMS/PKCS#7 content, or digitally signed objects are uploaded and processed by the affected system. In the device context, exploitation typically requires a logged-in user with high privileges or the processing of attacker-supplied cryptographic objects.

A successful attack using manipulated firmware, key files, PKCS#12 files, CMS/PKCS#7 content, or digitally signed objects may lead to memory corruption, application crash, or denial of service. Depending on the affected code path, execution context, platform protections, and toolchain mitigations, execution of malicious code may be possible. This can jeopardize confidentiality, integrity, and availability of the affected system.

• Control block CPX-CEC-C1-V3 (3473128)
• Control block CPX-CEC-M1-V3 (3472765)
• Control block CPX-CEC-S1-V3 (3472425)
• controller CPX-E-CEC-C1 (5226780)
• controller CPX-E-CEC-C1-EP (4252742)
• controller CPX-E-CEC-C1-PN (4252741)
• controller CPX-E-CEC-M1 (5266781)
• controller CPX-E-CEC-M1-EP (4252744)
• controller CPX-E-CEC-M1-PN (4252743)
• Licence GSPL-CDS-W (8122724)
• PA-Toolkit MTP Library GSBE-MTP-P-1 (8252574)
• Terminal CPX (197330)

This Application Note explains how to integrate the SFAB IO Link Flow Sensor and the function block library for the Festo SFAB Flow Sensor through EtherCAT using the Festo CPX-AP IO Link with a Festo PLC in the CODESYS programming environment.

• automation system CPX-E /-EX1E (5237644)
• controller CPX-E-CEC-C1-PN (4252741)
• controller CPX-E-CEC-M1-PN (4252743)