The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker.
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipc_diagnostics_package | Beckhoff | * | 2.0.0.1 (excluding) |
| Twincat/bsd | Beckhoff | * | 14.1.2.0 (excluding) |