Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3pcw-vp3f-6hvh

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.

Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.

EPSS

Процентиль: 22%
0.00071
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-326

Связанные уязвимости

CVSS3: 9.1
nvd
больше 7 лет назад

Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.

EPSS

Процентиль: 22%
0.00071
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-326