CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 1CVE-2019-5637 – Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service
https://notcve.org/view.php?id=CVE-2019-5637
21 Nov 2019 — When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior). Cuando Beckhoff TwinCAT está configurado para usar el controlador Profinet, se puede llegar a una denegación de servicio del controlador enviando un paquete UDP con formato incorrecto al dispositivo. Este problema afecta a TwinCAT 2 versión 2304 ... • https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-twincat-plc-environment-fixed • CWE-369: Divide By Zero •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2019-5636 – Beckhoff TwinCAT Discovery Service Denial of Service
https://notcve.org/view.php?id=CVE-2019-5636
21 Nov 2019 — When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still performing as normal. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior). Cuando un Beckhoff TwinCAT Runtime recibe un paquete UDP con formato incorrecto, el servicio de descubrimiento de ADS se cierra. Tenga en cuenta que los dispositivos TwinCAT siguen funcionando normalmente. • https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-twincat-plc-environment-fixed • CWE-404: Improper Resource Shutdown or Release •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2017-16726
https://notcve.org/view.php?id=CVE-2017-16726
27 Jun 2018 — Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable. Beckhoff TwinCAT soporta comunicaciones por ADS. • https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-001.pdf • CWE-285: Improper Authorization CWE-326: Inadequate Encryption Strength •
CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2017-16718
https://notcve.org/view.php?id=CVE-2017-16718
27 Jun 2018 — Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via ADS. This special command supports encrypted authentication with username/password. The encryption uses a fixed key, that could be extracted by an attacker. • https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-002.pdf • CWE-327: Use of a Broken or Risky Cryptographic Algorithm CWE-522: Insufficiently Protected Credentials •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2018-7502
https://notcve.org/view.php?id=CVE-2018-7502
23 Mar 2018 — Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges. Los controladores del kernel en Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259 y TwinCAT 3.1 no validan correctamente los valores de puntero proporcionados por el usuario. Un atacante que pueda ejecutar código en el objetivo podría... • http://www.securityfocus.com/bid/103487 • CWE-20: Improper Input Validation CWE-822: Untrusted Pointer Dereference •
CVSS: 9.4EPSS: 0%CPEs: 2EXPL: 0CVE-2014-5415
https://notcve.org/view.php?id=CVE-2014-5415
05 Oct 2016 — Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service. Imágenes Beckhoff Embedded PC en versiones anteriores a 22-10-2014 y componentes Automation Device Specification (ADS) TwinCAT podrían permitir a atacantes remotos obtener acceso a través de (1) Windows CE Remote Configuration Tool, (2) servicio CE Remote... • http://www.securityfocus.com/bid/93349 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.4EPSS: 0%CPEs: 2EXPL: 0CVE-2014-5414
https://notcve.org/view.php?id=CVE-2014-5414
05 Oct 2016 — Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Imágenes Beckhoff Embedded PC en versiones anteriores a 22-10-2014 y componentes Automation Device Specification (ADS) TwinCAT no restringen el número de intentos de autenticación, lo que hace más fácil para atacantes remotos obtener acceso a través de un ataque d... • http://www.securityfocus.com/bid/93349 • CWE-254: 7PK - Security Features •
CVSS: 7.5EPSS: 86%CPEs: 5EXPL: 2CVE-2011-3486 – Beckhoff TwinCAT 2.11.0.2004 - Denial of Service
https://notcve.org/view.php?id=CVE-2011-3486
16 Sep 2011 — Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read. Beckhoff TwinCAT 2.11.0.2004 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio a través de una petición modificada al puerto UDP 48899, lo que provoca una lectura fuera de límites. Beckhoff TwinCAT versions 2.11.0.2004 and below can be brought down by sending a crafted UDP packet to port 48899 (TCATSy... • https://www.exploit-db.com/exploits/17835 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •