CVE-2019-5637

Опубликовано: 21 нояб. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior).

Ссылки

https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-twincat-plc-environment-fixed/
Exploit
Third Party Advisory
https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2019-007.pdf
Mitigation
Vendor Advisory
https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-twincat-plc-environment-fixed/
Exploit
Third Party Advisory
https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2019-007.pdf
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:beckhoff:twincat:3.1.4022.30:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:beckhoff:twincat_cx2030:-:*:*:*:*:*:*:*

cpe:2.3:h:beckhoff:twincat_cx5140:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:beckhoff:twincat:3.1.4022.29:*:*:*:*:*:*:*

cpe:2.3:h:beckhoff:twincat_cx5140:-:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00566

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-369

Связанные уязвимости

GHSA-rc4x-2rwc-6x6r

github

больше 3 лет назад

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device.

BDU:2019-03668