Most recent entries from csaf_beckhoffautomationgmbhcokg

VDE-2020-051 — Beckhoff: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

Tue, 27 Apr 2021 08:08:00 +0000

Some TwinCAT OPC UA Server and IPC Diagnostics UA Server versions from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.

UPDATE A - 11.05.2021

Please note that some hardware products from Beckhoff are shipped with a TwinCAT OPC UA Server pre-installed. In some cases the server is enabled by default.

IPC Diagnostics UA Server (contained in Beckhoff's Windows images)

server versions up to and including 3.1.0.1 are affected Please note that IPC products from Beckhoff are shipped with an IPC Diagnostics UA Server pre-installed. In all cases the server is disabled by default. The version numbers named above always refer to the version number which is accessible via OPC UA at the server via the standard OPC UA node /Objects/Server/ServerStatus/BuildInfo/SoftwareVersion and on Windows also as the file property "File version" of the file TcOpcUaServer.exe for TwinCAT OPC UA Server respectively the file DevMgrSvr-UA.exe for IPC Diagnostics UA Server.

UPDATE A - 11.05.2021

Please note that IPC products from Beckhoff are shipped with an IPC Diagnostics UA Server pre-installed. While on Windows CE it is disabled by default all other Windows images have it enabled by default.

VDE-2024-064 — Beckhoff: Local command injection via TwinCAT Package Manager

Thu, 31 Oct 2024 11:00:00 +0000

A local user with administrative access rights can enter specialy crafted values for settings at the user interface (UI) of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed.

VDE-2019-019 — Beckhoff: TwinCAT Denial-of-Service in Profinet driver

Wed, 09 Oct 2019 10:00:00 +0000

In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.

VDE-2020-005 — Beckhoff: BK9000 couplers - Denial of service inhibits function

Tue, 10 Mar 2020 13:17:00 +0000

The coupler's function could be inhibited by an attack.

VDE-2020-019 — Beckhoff: EtherLeak in TwinCAT RT network driver

Tue, 16 Jun 2020 08:31:00 +0000

Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory content is transmitted within in the padding bytes of the frame. Most likely this memory contains slices from previously transmitted or received frames.

VDE-2020-037 — Beckhoff: Privilege Escalation through TwinCat System Tray (TcSysUI.exe)

Thu, 19 Nov 2020 13:41:00 +0000

The default installation path and its permissions for the TwinCAT runtime allow a local user to replace or modify executables other users of the same system might execute. The issue does not apply for installations underneath C:\Program Files.

VDE-2021-008 — Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products

Mon, 21 Oct 2024 08:00:00 +0000

The affected products can act as OPC UA client or server and are vulnerable to two different kind of attacks via the OPC UA protocol. For both cases the attacker can send packets via the OPC UA protocol without the need to authenticate and

1. provoke a stack overflow resulting in denial of service of the product or 2. make the product disclose information to the attacker without authorization.

VDE-2021-051 — Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server

Thu, 04 Nov 2021 07:00:00 +0000

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system.

VDE-2023-067 — Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

Wed, 13 Dec 2023 08:00:00 +0000

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia.

VDE-2024-045 — Beckhoff: Local authentication bypass in IPC-Diagnostics package included in TwinCAT/BSD operating system

Tue, 27 Aug 2024 08:00:00 +0000

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker.