Beckhoff ADS Router Use of a Broken or Risky Cryptographic Algorithm (CVE-2017-16718)

Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via ADS. This special command supports encrypted authentication with username/password. The encryption...

CVE-2020-16718

CVE-2020-16718 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-16718

...

CVE-2019-16718

In radare2 before 3.9.0, a command injection vulnerability exists in binsymbols in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and...

CVE-2019-16718

In radare2 before 3.9.0, a command injection vulnerability exists in binsymbols in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and...

CVE-2019-16718

Radare2 (up to 3.9.0) is affected by CVE-2019-16718 due to a command-injection in bin_symbols() (libr/core/cbin.c). The flaw stems from an insufficient fix for CVE-2019-14745 and improper handling of symbol names embedded in executables, allowing an attacker to run arbitrary shell commands with t...

CVE-2018-16718

The CVE-2018-16718 entry describes an XSS vulnerability in the NCBI ToolBox component wwwblast.c for legacy versions 2.0.7–2.2.26, exploitable via a crafted -z1 argument. The affected code path and exact root cause are not elaborated in the provided documents beyond stating XSS exists. No explici...

CVE-2017-16718

Beckhoff TwinCAT 3 uses ADS for communication, where a special command authenticates with a username/password using a fixed encryption key that can be extracted by an attacker. Exploitation requires network access at the moment a route is added. The issue is tied to the ADS routing feature where ...