Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.
Weakness
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Twincat | Beckhoff | 3.0 (including) | 3.1 (excluding) |
| Twincat | Beckhoff | 2.0 (including) | 2.0 (including) |
| Twincat | Beckhoff | 3.1-build_4022 (including) | 3.1-build_4022 (including) |
| Twincat | Beckhoff | 3.1-build_4024.0 (including) | 3.1-build_4024.0 (including) |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/21.html
- https://cwe.mitre.org/data/definitions/22.html
- https://cwe.mitre.org/data/definitions/459.html
- https://cwe.mitre.org/data/definitions/461.html
- https://cwe.mitre.org/data/definitions/473.html
- https://cwe.mitre.org/data/definitions/476.html
- https://cwe.mitre.org/data/definitions/59.html
- https://cwe.mitre.org/data/definitions/60.html
- https://cwe.mitre.org/data/definitions/667.html
- https://cwe.mitre.org/data/definitions/94.html
References
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf
- https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf
- https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648