Browse CVEs

HIGH 7.3 CVE-2024-41176 The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the d… Mdp Package 1.2.7.0 / 14.1.2.0+ Fix from $1,9502024-08-27 MEDIUM 5.5 CVE-2024-41175 The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privileged attacker. Ipc Diagnostics Package 2.0.0.1 / 14.1.2.0+ Fix from $1,6002024-08-27 HIGH 7.8 CVE-2024-41173 The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker. Ipc Diagnostics Package 2.0.0.1 / 14.1.2.0+ Fix from $1,9502024-08-27 HIGH 7.3 CVE-2024-41174 The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker. Ipc Diagnostics Package 2.1.1.0 / 14.1.2.0+ Fix from $1,9502024-08-27 MEDIUM 6.5 CVE-2021-34594 TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative… Tf6100 Firmware 4.3.48.0+ Fix from $1,6002021-11-04 CRITICAL 9.8 CVE-2020-20741 Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version CX9020_CB3011_WEC7_HPS_v602_TC31_B4016.6 allows remote att… Cx9020 Patch available Fix from $2,3002021-07-23 MEDIUM 5.3 CVE-2020-12526 TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are v… Ipc Diagnostics Ua Server after 3.3.18 Fix from $1,6002021-05-13 HIGH 7.3 CVE-2020-12510 The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and furthe… Twincat Extended Automation Runtime Mitigation only Fix from $1,9502020-11-19 MEDIUM 5.3 CVE-2020-12494 Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except … Twincat Driver after 3.1.0.3603 Fix from $1,6002020-06-16 HIGH 7.5 CVE-2020-9464 A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can… Bk9000 Firmware No fix yet Fix from $1,9502020-03-12 CRITICAL 9.8 CVE-2019-16871EPSS 5% Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Exe… Twincat 3.1+ Fix from $2,3002019-12-19 HIGH 7.5 CVE-2019-5636 When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still perfor… Twincat No fix yet Fix from $1,9502019-11-21 HIGH 7.5 CVE-2019-5637 When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP pac… Twincat No fix yet Fix from $1,9502019-11-21 CRITICAL 9.1 CVE-2017-16726 Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to… Twincat Mitigation only Fix from $2,3002018-06-27 MEDIUM 5.9 CVE-2017-16718 Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user co… Twincat No fix yet Fix from $1,6002018-06-27 HIGH 7.8 CVE-2018-7502 Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An… Twincat Mitigation only Fix from $1,9502018-03-23 CRITICAL 9.1 CVE-2014-5415 Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain acc… Embedded Pc Images Mitigation only Fix from $2,3002016-10-05 CRITICAL 9.1 CVE-2014-5414 Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authenticati… Embedded Pc Images Mitigation only Fix from $2,3002016-10-05 HIGH 9.0 CVE-2015-4051EPSS 6% Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of ser… Ipc Diagnostics after 1.7 Fix from $1,9502015-06-08 MEDIUM 5.0 CVE-2011-3486EPSS 50% Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers… Twincat after 2.11.0.2004 Fix from $1,6002011-09-16