Beckhoff kayıtları
beckhoff üreticisine ait 22 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %4,5
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %27,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-20 Improper Input Validation1
- CWE-23 Relative Path Traversal1
- CWE-276 Incorrect Default Permissions1
- CWE-284 Improper Access Control1
- CWE-285 Improper Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
22 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2019-16871İstismar yok | Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remotebeckhoff · twincat · CWE-290 | Kritik9,8 | — | %5,3 | 19 Ara 2019 |
39İzleyin | CVE-2020-20741İstismar yok | Incorrect Access Control in Beckhoff Automation GmbH & Co.beckhoff · cx9020 | Kritik9,8 | — | %1,6 | 23 Tem 2021 |
38İzleyin | CVE-2015-4051İstismar yok | Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denibeckhoff · ipc diagnostics · CWE-284 | Kritik9,0 | — | %5,7 | 8 Haz 2015 |
37İzleyin | CVE-2014-5414İstismar yok | Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attemptsbeckhoff · embedded pc images · CWE-307 | Kritik9,1 | — | %4,8 | 5 Eki 2016 |
37İzleyin | CVE-2014-5415İstismar yok | Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Functionbeckhoff · embedded pc images · CWE-749 | Kritik9,1 | — | %4,3 | 5 Eki 2016 |
36İzleyin | CVE-2017-16726İstismar yok | Beckhoff TwinCAT supports communication over ADS.beckhoff · twincat · CWE-285 | Kritik9,1 | — | %0,5 | 27 Haz 2018 |
35İzleyin | CVE-2011-3486Silahlaştırılmış | Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, whichbeckhoff · twincat · CWE-119 | Orta5,0 | — | %49,7 | 16 Eyl 2011 |
31İzleyin | CVE-2018-7502İstismar yok | Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer vbeckhoff · twincat · CWE-822 | Yüksek7,8 | — | %0,6 | 23 Mar 2018 |
31İzleyin | CVE-2024-41173İstismar yok | Beckhoff: Local authentication bypass in the IPC-Diagnostics package included in TwinCAT/BSDbeckhoff · ipc diagnostics package · CWE-288 | Yüksek7,8 | — | %0,2 | 27 Ağu 2024 |
30İzleyin | CVE-2019-5636İstismar yok | Beckhoff TwinCAT Discovery Service Denial of Servicebeckhoff · twincat · CWE-404 | Yüksek7,5 | — | %1,4 | 21 Kas 2019 |
30İzleyin | CVE-2019-5637İstismar yok | Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Servicebeckhoff · twincat · CWE-369 | Yüksek7,5 | — | %1,4 | 21 Kas 2019 |
30İzleyin | CVE-2020-9464İstismar yok | A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000.beckhoff · bk9000 firmware · CWE-400 | Yüksek7,5 | — | %1,4 | 12 Mar 2020 |
29İzleyin | CVE-2020-12510İstismar yok | Beckhoff: Privilege Escalation through TwinCat Systembeckhoff · twincat extended automation runtime · CWE-276 | Yüksek7,3 | — | %0,9 | 19 Kas 2020 |
29İzleyin | CVE-2024-41176İstismar yok | Beckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSDbeckhoff · mdp package · CWE-120 | Yüksek7,3 | — | %0,3 | 27 Ağu 2024 |
29İzleyin | CVE-2024-41174İstismar yok | Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSDbeckhoff · ipc diagnostics package · CWE-79 | Yüksek7,3 | — | %0,2 | 27 Ağu 2024 |
26İzleyin | CVE-2021-34594İstismar yok | Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Serverbeckhoff · tf6100 firmware · CWE-23 | Orta6,5 | — | %1,1 | 4 Kas 2021 |
26İzleyin | CVE-2024-8934İstismar yok | Beckhoff: Local command injection via TwinCAT Package Managerbeckhoff · twincat package manager · CWE-78 | Orta6,5 | — | %0,2 | 31 Eki 2024 |
23İzleyin | CVE-2017-16718İstismar yok | Beckhoff TwinCAT 3 supports communication over ADS.beckhoff · twincat · CWE-522 | Orta5,9 | — | %0,4 | 27 Haz 2018 |
22İzleyin | CVE-2024-41175İstismar yok | Beckhoff: Local Denial-of-Service vulnerability in TwinCAT/BSD and the IPC-Diagnostics packagebeckhoff · ipc diagnostics package · CWE-770 | Orta5,5 | — | %0,2 | 27 Ağu 2024 |
21İzleyin | CVE-2020-12494İstismar yok | Beckhoff: Etherleak in TwinCAT RT network driverbeckhoff · twincat driver · CWE-459 | Orta5,3 | — | %1,0 | 16 Haz 2020 |
21İzleyin | CVE-2020-12526İstismar yok | BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Serverbeckhoff · ipc diagnostics ua server · CWE-20 | Orta5,3 | — | %1,0 | 13 May 2021 |
18İzleyin | CVE-2023-6545İstismar yok | Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhfbeckhoff · authelia-bhf · CWE-601 | Orta4,7 | — | %0,4 | 14 Ara 2023 |
- CVE-2019-1687141Planlayın
Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote
KritikCVSS 9,8İstismar yokEPSS %5beckhoff · twincat19 Ara 2019
- CVE-2020-2074139İzleyin
Incorrect Access Control in Beckhoff Automation GmbH & Co.
KritikCVSS 9,8İstismar yokEPSS %2beckhoff · cx902023 Tem 2021
- CVE-2015-405138İzleyin
Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a deni
KritikCVSS 9,0İstismar yokEPSS %6beckhoff · ipc diagnostics8 Haz 2015
- CVE-2014-541437İzleyin
Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts
KritikCVSS 9,1İstismar yokEPSS %5beckhoff · embedded pc images5 Eki 2016
- CVE-2014-541537İzleyin
Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function
KritikCVSS 9,1İstismar yokEPSS %4beckhoff · embedded pc images5 Eki 2016
- CVE-2017-1672636İzleyin
Beckhoff TwinCAT supports communication over ADS.
KritikCVSS 9,1İstismar yokEPSS %1beckhoff · twincat27 Haz 2018
- CVE-2011-348635İzleyin
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which
OrtaCVSS 5,0SilahlaştırılmışEPSS %50beckhoff · twincat16 Eyl 2011
- CVE-2018-750231İzleyin
Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer v
YüksekCVSS 7,8İstismar yokEPSS %1beckhoff · twincat23 Mar 2018
- CVE-2024-4117331İzleyin
Beckhoff: Local authentication bypass in the IPC-Diagnostics package included in TwinCAT/BSD
YüksekCVSS 7,8İstismar yokEPSS %0beckhoff · ipc diagnostics package27 Ağu 2024
- CVE-2019-563630İzleyin
Beckhoff TwinCAT Discovery Service Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %1beckhoff · twincat21 Kas 2019
- CVE-2019-563730İzleyin
Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %1beckhoff · twincat21 Kas 2019
- CVE-2020-946430İzleyin
A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000.
YüksekCVSS 7,5İstismar yokEPSS %1beckhoff · bk9000 firmware12 Mar 2020
- CVE-2020-1251029İzleyin
Beckhoff: Privilege Escalation through TwinCat System
YüksekCVSS 7,3İstismar yokEPSS %1beckhoff · twincat extended automation runtime19 Kas 2020
- CVE-2024-4117629İzleyin
Beckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSD
YüksekCVSS 7,3İstismar yokEPSS %0beckhoff · mdp package27 Ağu 2024
- CVE-2024-4117429İzleyin
Beckhoff: Improper input neutralization vulnerability in the IPC-Diagnostics package in TwinCAT/BSD
YüksekCVSS 7,3İstismar yokEPSS %0beckhoff · ipc diagnostics package27 Ağu 2024
- CVE-2021-3459426İzleyin
Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server
OrtaCVSS 6,5İstismar yokEPSS %1beckhoff · tf6100 firmware4 Kas 2021
- CVE-2024-893426İzleyin
Beckhoff: Local command injection via TwinCAT Package Manager
OrtaCVSS 6,5İstismar yokEPSS %0beckhoff · twincat package manager31 Eki 2024
- CVE-2017-1671823İzleyin
Beckhoff TwinCAT 3 supports communication over ADS.
OrtaCVSS 5,9İstismar yokEPSS %0beckhoff · twincat27 Haz 2018
- CVE-2024-4117522İzleyin
Beckhoff: Local Denial-of-Service vulnerability in TwinCAT/BSD and the IPC-Diagnostics package
OrtaCVSS 5,5İstismar yokEPSS %0beckhoff · ipc diagnostics package27 Ağu 2024
- CVE-2020-1249421İzleyin
Beckhoff: Etherleak in TwinCAT RT network driver
OrtaCVSS 5,3İstismar yokEPSS %1beckhoff · twincat driver16 Haz 2020
- CVE-2020-1252621İzleyin
BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server
OrtaCVSS 5,3İstismar yokEPSS %1beckhoff · ipc diagnostics ua server13 May 2021
- CVE-2023-654518İzleyin
Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf
OrtaCVSS 4,7İstismar yokEPSS %0beckhoff · authelia-bhf14 Ara 2023