Vulnerabilities

TI-2020-09989 CVE-2020-12494 · GHSA-92f3-r9r6-rrfr

Beckhoff: Etherleak in TwinCAT RT network driver

LOW 26

Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01014 Published 2020-06-16 No fix listed CWE-459

TI-2019-12580 CVE-2019-16871 · GHSA-2q68-c93j-vxw8

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows…

MEDIUM 50

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05302 Published 2019-12-19 No fix listed CWE-290

TI-2019-04001 CVE-2019-5637 · GHSA-rc4x-2rwc-6x6r

Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service

LOW 36

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01427 Published 2019-11-21 No fix listed CWE-369

TI-2019-04000 CVE-2019-5636 · GHSA-pv38-9q3c-3qq8

Beckhoff TwinCAT Discovery Service Denial of Service

LOW 36

When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01427 Published 2019-11-21 No fix listed CWE-404

TI-2017-12294 CVE-2017-16726 · GHSA-3pcw-vp3f-6hvh

Improper authorization in ICS-CERT Beckhoff TwinCAT

MEDIUM 40

Beckhoff TwinCAT supports communication over ADS.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00508 Published 2018-06-27 No fix listed CWE-285

TI-2017-12287 CVE-2017-16718 · GHSA-wx26-fm45-hvxc

Insufficiently protected credentials in ICS-CERT Beckhoff TwinCAT

LOW 27

Beckhoff TwinCAT 3 supports communication over ADS.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00423 Published 2018-06-27 No fix listed CWE-522

TI-2018-05411 CVE-2018-7502 · GHSA-v98p-fx5c-967q

Improper input validation in ICS-CERT Beckhoff TwinCAT PLC products

LOW 35

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00557 Published 2018-03-23 No fix listed CWE-822

TI-2014-04415 CVE-2014-5415 · GHSA-f3qh-p6vf-frvj

Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function

MEDIUM 46

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Dis…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04339 Published 2016-10-05 Fixed in October 22, 2014 CWE-749

TI-2014-04414 CVE-2014-5414 · GHSA-jj96-ggr5-64rp

Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts

MEDIUM 47

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain acces…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04801 Published 2016-10-05 Fixed in October 22, 2014 CWE-307

TI-2011-03066 CVE-2011-3486 · GHSA-74h6-2hgj-rvpx

Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of…

MEDIUM 54

Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.4965 Published 2011-09-16 No fix listed CWE-119

Vulnerabilities

Filters