CVE-2024-41175

CVE-2024-41175 affects the IPC-Diagnostics package used in Beckhoff TwinCAT/BSD. The vulnerability allows a local attacker with low privileges to cause a denial-of-service, with exploitation involving local access and no user interaction required. The publicly shared details consistently describe...

CVE-2024-41174 Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...

CVE-2024-41174 Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...

CVE-2024-41174

CVE-2024-41174 concerns the IPC-Diagnostics package in TwinCAT/BSD, where a low-privileged, local attacker can trigger improper input neutralization. The entry notes a local attack vector with low privileges, requiring user interaction, and reports high impact across confidentiality, integrity, a...

CVE-2024-41173 Beckhoff: Local authentication bypass in the IPC-Diagnostics package included in TwinCAT/BSD

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker...

CVE-2024-41173 Beckhoff: Local authentication bypass in the IPC-Diagnostics package included in TwinCAT/BSD

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker...

CVE-2024-41173

CVE-2024-41173 affects Beckhoff TwinCAT/BSD: the IPC-Diagnostics package is vulnerable to local authentication bypass by a low-privileged attacker. Documents show local-exploit scenario with high impact (CVE details, NVD metrics CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8). Conn...

CVE-2024-41174: Improper Neutralization of Input During Web Page Generation

The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker...

Beckhoff TwinCAT/BSD 安全漏洞

Beckhoff TwinCAT/BSD is a new operating system from Beckhoff. A security vulnerability exists in Beckhoff TwinCAT/BSD, which stems from an MPD package that allows an authenticated, low-privileged local attacker to induce a denial of service state in the daemon via a carefully constructed HTTP...

PT-2024-29304

Name of the Vulnerable Software and Affected Versions TwinCAT/BSD affected versions not specified Description The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker. Recommendations At the moment, there is no information abo...

Beckhoff TwinCAT/BSD 安全漏洞

Beckhoff TwinCAT/BSD is a new operating system from Beckhoff Germany. A security vulnerability exists in Beckhoff TwinCAT/BSD, which originates from the IPC-Diagnostics package and allows a low-privileged attacker to launch a local denial-of-service attack...

PT-2024-29305

Name of the Vulnerable Software and Affected Versions TwinCAT/BSD affected versions not specified Description The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker. Recommendations At the moment, there is no information about...

Beckhoff TwinCAT/BSD 安全漏洞

Beckhoff TwinCAT/BSD is a new operating system from Beckhoff Germany. A security vulnerability exists in Beckhoff TwinCAT/BSD, which stems from the IPC-Diagnostics package being susceptible to local authentication bypass by a low-privileged attacker...

CVE-2024-41176: Buffer Copy without Checking Size of Input

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service DoS condition on the daemon and execute code in the context of user “root” via a crafted HTTP request...

CVE-2024-41175: Allocation of Resources Without Limits or Throttling

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privileged attacker...

CVE-2024-41173: Authentication Bypass Using an Alternate Path or Channel

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker...

Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE and LPE

Microsoft on Thursday disclosed four medium-severity security flaws in the open-source OpenVPN software that could be chained to achieve remote code execution RCE and local privilege escalation LPE. "This attack chain could enable attackers to gain full control over targeted endpoints, potentiall...

[SECURITY] Fedora 40 Update: wpa_supplicant-2.11-1.fc40

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

[SECURITY] Fedora 39 Update: botan2-2.19.5-1.fc39

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

[SECURITY] Fedora 40 Update: botan2-2.19.5-1.fc40

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...