CVE-2019-16871 - Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol

Back Back to CVE browser

CRITICAL

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol

Published Dec 19, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 5.30%

Description

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-290

Authentication Bypass by Spoofing

References (2)

https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf
x_refsource_CONFIRMVendor Advisory
https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf		x_refsource_CONFIRMVendor Advisory
https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648		x_refsource_MISCExploitThird Party Advisory