CVE-2011-3486 – Beckhoff TwinCAT 2.11.0.2004 - Denial of Service

https://notcve.org/view.php?id=CVE-2011-3486

Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read. Beckhoff TwinCAT 2.11.0.2004 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio a través de una petición modificada al puerto UDP 48899, lo que provoca una lectura fuera de límites. Beckhoff TwinCAT versions 2.11.0.2004 and below can be brought down by sending a crafted UDP packet to port 48899 (TCATSysSrv.exe). • https://www.exploit-db.com/exploits/17835 http://aluigi.altervista.org/adv/twincat_1-adv.txt http://osvdb.org/75495 http://securityreason.com/securityalert/8380 http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-06.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/69765 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •