Skip to content
Noroxi

Beckhoff records

22 published records for vendor beckhoff.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 4.5%
Pre-auth RCE
1
With a fix record
27.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 18
  3. 19
  4. 20
  5. 21
  6. 23
  7. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2019-16871
    41Plan

    Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote

    CriticalCVSS 9.8No exploitEPSS 5%

    beckhoff · twincatDec 19, 2019

  • CVE-2020-20741
    39Monitor

    Incorrect Access Control in Beckhoff Automation GmbH & Co.

    CriticalCVSS 9.8No exploitEPSS 2%

    beckhoff · cx9020Jul 23, 2021

  • CVE-2015-4051
    38Monitor

    Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a deni

    CriticalCVSS 9.0No exploitEPSS 6%

    beckhoff · ipc diagnosticsJun 8, 2015

  • CVE-2014-5414
    37Monitor

    Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts

    CriticalCVSS 9.1No exploitEPSS 5%

    beckhoff · embedded pc imagesOct 5, 2016

  • CVE-2014-5415
    37Monitor

    Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function

    CriticalCVSS 9.1No exploitEPSS 4%

    beckhoff · embedded pc imagesOct 5, 2016

  • CVE-2017-16726
    36Monitor

    Beckhoff TwinCAT supports communication over ADS.

    CriticalCVSS 9.1No exploitEPSS 1%

    beckhoff · twincatJun 27, 2018

  • CVE-2011-3486
    35Monitor

    Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which

    MediumCVSS 5.0WeaponizedEPSS 50%

    beckhoff · twincatSep 16, 2011

  • CVE-2018-7502
    31Monitor

    Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer v

    HighCVSS 7.8No exploitEPSS 1%

    beckhoff · twincatMar 23, 2018

  • CVE-2024-41173
    31Monitor

    Beckhoff: Local authentication bypass in the IPC-Diagnostics package included in TwinCAT/BSD

    HighCVSS 7.8No exploitEPSS 0%

    beckhoff · ipc diagnostics packageAug 27, 2024

  • CVE-2019-5636
    30Monitor

    Beckhoff TwinCAT Discovery Service Denial of Service

    HighCVSS 7.5No exploitEPSS 1%

    beckhoff · twincatNov 21, 2019

  • CVE-2019-5637
    30Monitor

    Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service

    HighCVSS 7.5No exploitEPSS 1%

    beckhoff · twincatNov 21, 2019

  • CVE-2020-9464
    30Monitor

    A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000.

    HighCVSS 7.5No exploitEPSS 1%

    beckhoff · bk9000 firmwareMar 12, 2020

  • CVE-2020-12510
    29Monitor

    Beckhoff: Privilege Escalation through TwinCat System

    HighCVSS 7.3No exploitEPSS 1%

    beckhoff · twincat extended automation runtimeNov 19, 2020

  • CVE-2024-41176
    29Monitor

    Beckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSD

    HighCVSS 7.3No exploitEPSS 0%

    beckhoff · mdp packageAug 27, 2024

  • CVE-2024-41174
    29Monitor

    Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD

    HighCVSS 7.3No exploitEPSS 0%

    beckhoff · ipc diagnostics packageAug 27, 2024

  • CVE-2021-34594
    26Monitor

    Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server

    MediumCVSS 6.5No exploitEPSS 1%

    beckhoff · tf6100 firmwareNov 4, 2021

  • CVE-2024-8934
    26Monitor

    Beckhoff: Local command injection via TwinCAT Package Manager

    MediumCVSS 6.5No exploitEPSS 0%

    beckhoff · twincat package managerOct 31, 2024

  • CVE-2017-16718
    23Monitor

    Beckhoff TwinCAT 3 supports communication over ADS.

    MediumCVSS 5.9No exploitEPSS 0%

    beckhoff · twincatJun 27, 2018

  • CVE-2024-41175
    22Monitor

    Beckhoff: Local Denial-of-Service vulnerability in TwinCAT/BSD and the IPC-Diagnostics package

    MediumCVSS 5.5No exploitEPSS 0%

    beckhoff · ipc diagnostics packageAug 27, 2024

  • CVE-2020-12494
    21Monitor

    Beckhoff: Etherleak in TwinCAT RT network driver

    MediumCVSS 5.3No exploitEPSS 1%

    beckhoff · twincat driverJun 16, 2020

  • CVE-2020-12526
    21Monitor

    BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

    MediumCVSS 5.3No exploitEPSS 1%

    beckhoff · ipc diagnostics ua serverMay 13, 2021

  • CVE-2023-6545
    18Monitor

    Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

    MediumCVSS 4.7No exploitEPSS 0%

    beckhoff · authelia-bhfDec 14, 2023