CVSS: 9.4EPSS: 0%CPEs: 2EXPL: 0CVE-2014-5415
https://notcve.org/view.php?id=CVE-2014-5415
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service. Imágenes Beckhoff Embedded PC en versiones anteriores a 22-10-2014 y componentes Automation Device Specification (ADS) TwinCAT podrían permitir a atacantes remotos obtener acceso a través de (1) Windows CE Remote Configuration Tool, (2) servicio CE Remote Display o (3) servicio TELNET. • http://www.securityfocus.com/bid/93349 https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.0EPSS: 63%CPEs: 5EXPL: 2CVE-2011-3486 – Beckhoff TwinCAT 2.11.0.2004 - Denial of Service
https://notcve.org/view.php?id=CVE-2011-3486
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read. Beckhoff TwinCAT 2.11.0.2004 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio a través de una petición modificada al puerto UDP 48899, lo que provoca una lectura fuera de límites. Beckhoff TwinCAT versions 2.11.0.2004 and below can be brought down by sending a crafted UDP packet to port 48899 (TCATSysSrv.exe). • https://www.exploit-db.com/exploits/17835 http://aluigi.altervista.org/adv/twincat_1-adv.txt http://osvdb.org/75495 http://securityreason.com/securityalert/8380 http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-06.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/69765 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •