CVE-2019-16871

CVE-2019-16871 affects Beckhoff Embedded Windows PLCs up to version 3.1.4024.0 and Beckhoff TwinCAT on Windows Engineering stations. The vulnerability enables Remote Code Execution as SYSTEM via the Beckhoff ADS protocol. The provided sources describe the impact but do not specify the underlying ...

CVE-2018-7502

CVE-2018-7502 affects Beckhoff TwinCAT: 3.1 Build 4022.4, 2.11 R3 2259, and 3.1. Root cause is unvalidated user-supplied pointer values in kernel drivers, enabling a code-execution path with LOCAL access and LOW complexity that could yield SYSTEM privileges. Confirmed by multiple sources (NVD/Ten...

CVE-2020-12494

Beckhoff TwinCAT RT network driver for Intel 8254x/8255x EtherCAT functionality contains a padding issue: non-realtime frames are not padded to the minimum Ethernet frame size, causing arbitrary memory content to be transmitted in the padding bytes. This can lead to memory disclosure, with the mo...

CVE-2019-5637

CVE-2019-5637 affects Beckhoff TwinCAT Profinet driver. A malformed UDP packet on the network can cause denial of service of the controller, impacting TwinCAT 2 (build 2304 and earlier) and TwinCAT 3.1 (build 4204.0 and earlier). The available documents confirm the vulnerability details and affec...

CVE-2019-5636

CVE-2019-5636: A Beckhoff TwinCAT Runtime can trigger a shutdown of the ADS Discovery Service when receiving a malformed UDP packet, while TwinCAT devices continue functioning. Affected: TwinCAT 2 v2304 and earlier; TwinCAT 3.1 v4204.0 and earlier. Root cause: malformed UDP handling leads to serv...

CVE-2017-16718

Beckhoff TwinCAT 3 uses ADS for communication, where a special command authenticates with a username/password using a fixed encryption key that can be extracted by an attacker. Exploitation requires network access at the moment a route is added. The issue is tied to the ADS routing feature where ...

CVE-2017-16726

Beckhoff TwinCAT uses ADS for communication; ADS lacks built-in encryption to preserve performance, enabling an attacker who can observe legitimate ADS traffic to forge arbitrary ADS packets. Affected: TwinCAT/ADS protocol (Be aware of network exposure). Impact: confidentiality and integrity of A...

CVE-2011-3486

Beckhoff TwinCAT 2.11.0.2004 and earlier are affected by CVE-2011-3486. A remote attacker can trigger a denial-of-service by sending a crafted UDP packet to port 48899 (TCATSysSrv.exe), causing an out-of-bounds read. Public exploitation is evidenced by Metasploit modules and Nessus/CVE references...

CVE-2014-5414

Beckhoff Embedded PC Images (pre-2014-10-22) and Automation Device Specification (ADS) TwinCAT components expose an authentication-bruteforce risk due to not limiting login attempts. This remote vulnerability could allow unauthorized access via brute-force over ADS-related services. Affected buil...

CVE-2014-5415

Beckhoff CVE-2014-5415 applies to Embedded PC Images released before 2014-10-22 and TwinCAT ADS components. The underlying issue is exposure of vulnerable services (Windows CE Remote Configuration Tool, CE Remote Display service, TELNET) that can allow remote access. A CVSSv3 base score of 9.1 (A...