Read the docs

Beckhoff

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Beckhoff records in CISA KEV

No Beckhoff vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Twincat 10 records MEDIUM Twincat/bsd 4 records LOW Ipc Diagnostics Package 3 records LOW Embedded Pc Images 2 records MEDIUM Authelia-bhf 1 record LOW Bk9000 Firmware 1 record LOW Cx9020 1 record MEDIUM Ipc Diagnostics 1 record MEDIUM

Records

10 records in Twincat · all components

TI-2014-04414 CVE-2014-5414 · GHSA-jj96-ggr5-64rp

Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts

Priority MEDIUM 47

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain acces…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04801 Published 2016-10-05 Fixed in October 22, 2014 CWE-307
TI-2014-04415 CVE-2014-5415 · GHSA-f3qh-p6vf-frvj

Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function

Priority MEDIUM 46

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Dis…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04339 Published 2016-10-05 Fixed in October 22, 2014 CWE-749
TI-2019-04001 CVE-2019-5637 · GHSA-rc4x-2rwc-6x6r

Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service

Priority LOW 36

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01427 Published 2019-11-21 No fix listed CWE-369
TI-2019-04000 CVE-2019-5636 · GHSA-pv38-9q3c-3qq8

Beckhoff TwinCAT Discovery Service Denial of Service

Priority LOW 36

When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01427 Published 2019-11-21 No fix listed CWE-404
TI-2018-05411 CVE-2018-7502 · GHSA-v98p-fx5c-967q

Improper input validation in ICS-CERT Beckhoff TwinCAT PLC products

Priority LOW 35

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00557 Published 2018-03-23 No fix listed CWE-822
TI-2020-09989 CVE-2020-12494 · GHSA-92f3-r9r6-rrfr

Beckhoff: Etherleak in TwinCAT RT network driver

Priority LOW 26

Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01014 Published 2020-06-16 No fix listed CWE-459
Open these records in search →