CVE-2014-5415
Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function
- State
- Published
- Severity
- 9.1 Critical
- Published
- Oct 5, 2016
- Updated
- Nov 4, 2025
- Reserved
- Aug 22, 2014
Description
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Embedded PC ImagesBeckhoff |
|
TwinCAT Components featuring Automation Device Specification (ADS) communicationBeckhoff |
|
References
- 93349vdb-entry
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json
- https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.