CVE-2024-41173

2024-08-2708:15:04

CWE-288

[email protected]

web.nvd.nist.gov

twincat/bsd

ipc-diagnostics

local authentication bypass

vulnerability

low privileged attacker

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.5%

JSON

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker.

Affected configurations

Nvd

Node

beckhoffipc_diagnostics_packageRange<2.0.0.1

beckhofftwincat\/bsdRange<14.1.2.0

VendorProductVersionCPE
beckhoffipc_diagnostics_package*cpe:2.3:a:beckhoff:ipc_diagnostics_package:*:*:*:*:*:*:*:*
beckhofftwincat\/bsd*cpe:2.3:o:beckhoff:twincat\/bsd:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
beckhoff	ipc_diagnostics_package	*	cpe:2.3:a:beckhoff:ipc_diagnostics_package::::::::
beckhoff	twincat\/bsd	*	cpe:2.3:o:beckhoff:twincat\/bsd::::::::