CVE-2021-2144 Festo Didactic SE CVE debrief

Who should care

Festo MES PC operators, OT/ICS administrators, Oracle MySQL administrators, and security teams responsible for remotely reachable database services should prioritize this advisory if affected versions are present. Systems exposing the vulnerable MySQL Server component, especially where high-privileged access is available, deserve the fastest review.

Technical summary

The supplied record identifies CVE-2021-2144 as a parser-related vulnerability in Oracle MySQL Server. Affected versions are 5.7.29 and prior, and 8.0.19 and prior. The vulnerability is network accessible via multiple protocols and requires a high-privileged attacker, with impact described as takeover of MySQL Server and CVSS 3.1 vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (7.2 High).

Defensive priority

High for exposed or still-supported deployments; the attack requires high privileges, but the impact is severe and the advisory recommends replacement/fix action rather than deferral.

Recommended defensive actions

• Verify whether the MES PC deployment includes the affected Oracle MySQL Server versions identified in the advisory.
• Migrate to the current Factory Control Panel version referenced in the remediation, which is described as including fixes.
• Remove or restrict unnecessary network access to the MySQL service and limit protocol exposure to only what is required.
• Review who has high-privilege access to the affected system and reduce privileged access paths where possible.
• Use the CISA ICS advisory and vendor references to confirm your exact product/version mapping before making changes.

Evidence notes

The supplied CISA CSAF source item (ICSA-26-027-02) provides the vulnerability description, affected versions, CVSS vector, and remediation note for Festo Didactic SE MES PC. The remediation states that Factory Control Panel replaces XAMPP on MES PCs and includes fixes for these vulnerabilities. The CVE.org record is the canonical CVE reference. Supplied enrichment shows no Known Exploited Vulnerabilities (KEV) entry.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.