Most recent entries from csaf_beckhoffautomationgmbhcokg

VDE-2019-019 — Beckhoff: TwinCAT Denial-of-Service in Profinet driver

Wed, 09 Oct 2019 10:00:00 +0000

In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.

VDE-2020-005 — Beckhoff: BK9000 couplers - Denial of service inhibits function

Tue, 10 Mar 2020 13:17:00 +0000

The coupler's function could be inhibited by an attack.

VDE-2020-019 — Beckhoff: EtherLeak in TwinCAT RT network driver

Tue, 16 Jun 2020 08:31:00 +0000

Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory content is transmitted within in the padding bytes of the frame. Most likely this memory contains slices from previously transmitted or received frames.

VDE-2020-037 — Beckhoff: Privilege Escalation through TwinCat System Tray (TcSysUI.exe)

Thu, 19 Nov 2020 13:41:00 +0000

The default installation path and its permissions for the TwinCAT runtime allow a local user to replace or modify executables other users of the same system might execute. The issue does not apply for installations underneath C:\Program Files.

VDE-2020-051 — Beckhoff: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

Tue, 27 Apr 2021 08:08:00 +0000

Some TwinCAT OPC UA Server and IPC Diagnostics UA Server versions from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.

UPDATE A - 11.05.2021

Please note that some hardware products from Beckhoff are shipped with a TwinCAT OPC UA Server pre-installed. In some cases the server is enabled by default.

IPC Diagnostics UA Server (contained in Beckhoff's Windows images)

server versions up to and including 3.1.0.1 are affected Please note that IPC products from Beckhoff are shipped with an IPC Diagnostics UA Server pre-installed. In all cases the server is disabled by default. The version numbers named above always refer to the version number which is accessible via OPC UA at the server via the standard OPC UA node /Objects/Server/ServerStatus/BuildInfo/SoftwareVersion and on Windows also as the file property "File version" of the file TcOpcUaServer.exe for TwinCAT OPC UA Server respectively the file DevMgrSvr-UA.exe for IPC Diagnostics UA Server.

UPDATE A - 11.05.2021

Please note that IPC products from Beckhoff are shipped with an IPC Diagnostics UA Server pre-installed. While on Windows CE it is disabled by default all other Windows images have it enabled by default.

VDE-2021-051 — Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server

Thu, 04 Nov 2021 07:00:00 +0000

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system.

VDE-2022-003 — BECKHOFF: Null Pointer Dereference vulnerability in products with OPC UA technology

Tue, 01 Mar 2022 12:34:00 +0000

By tricking clients of the mentioned products into contacting malicious OPC UA servers and thereby acting as OPC UA clients, a crash of the component can be provoked.

VDE-2023-067 — Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

Wed, 13 Dec 2023 08:00:00 +0000

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia.

VDE-2024-045 — Beckhoff: Local authentication bypass in IPC-Diagnostics package included in TwinCAT/BSD operating system

Tue, 27 Aug 2024 08:00:00 +0000

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker.

VDE-2024-048 — Beckhoff: Improper neutralization of input in IPC-Diagnostics-www package included in TwinCAT/BSD operating system

Tue, 27 Aug 2024 08:00:00 +0000

The IPC-Diagnostics-www package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker.