PatchSiren

PatchSiren cyber security CVE debrief

CVE-2022-27449 Festo Didactic SE CVE debrief

CISA’s CSAF advisory ICSA-26-027-02 ties CVE-2022-27449 to Festo Didactic SE MES PC and describes a segmentation fault in MariaDB Server v10.9 and below. The impact is availability-only (CVSS 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), so defenders should treat it as a network-reachable denial-of-service risk rather than a code-execution issue. Festo’s stated remediation is to move MES PCs to the current Factory Control Panel version obtained through technical support.

Vendor
Festo Didactic SE
Product
MES PC
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2024-02-27
Original CVE updated
2026-01-27
Advisory published
2024-02-27
Advisory updated
2026-01-27

Who should care

Festo Didactic SE MES PC operators, OT/ICS administrators, and anyone managing the affected MES PC software stack that includes MariaDB/XAMPP components.

Technical summary

The supplied corpus describes a segmentation fault in MariaDB Server v10.9 and below at sql/item_func.cc:148, with a resulting denial-of-service condition. The cited CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, and the source links include CWE-617 as the relevant weakness reference. No confidentiality or integrity impact is indicated in the corpus.

Defensive priority

High

Recommended defensive actions

  • Obtain and deploy the current Factory Control Panel version from Festo technical support, as stated in the remediation guidance.
  • Inventory MES PCs and confirm whether they are running the affected software stack or legacy XAMPP-based components.
  • Schedule upgrades during maintenance windows and verify service stability after the vulnerable component is replaced.
  • If immediate remediation is not possible, reduce exposure by limiting network access to MES PCs and applying CISA ICS defense-in-depth guidance.
  • Monitor affected systems for MariaDB-related crashes, unexpected service restarts, or repeated availability issues.
  • Document the asset versions and remediation status so affected MES PCs can be prioritized and validated consistently.

Evidence notes

The supplied source item (ICSA-26-027-02) is a CISA republication of a Festo Didactic SE advisory and explicitly states: 'MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.' The same corpus includes the Festo advisory reference, the CISA ICS advisory page, the CVE record, and CISA ICS recommended-practices links. The remediation entry says Festo Didactic has released Factory Control Panel as a replacement for XAMPP on its MES PCs and instructs users to contact technical support for the current version. No KEV entry or threat campaign is provided in the supplied corpus.

Sources and references

Verified primary and authoritative sources

  • CVE-2022-27449 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2022-27449

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2022-27449 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2022-27449

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-027-02.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2024/fsa-202402.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://certvde.com/en/advisories/vendor/festo/

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://festo.com/psirt

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://certvde.com/en/advisories/VDE-2023-065

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.