CVE-2017-16718
- State
- Published
- Severity
- Not scored
- Published
- Jun 27, 2018
- Updated
- Sep 16, 2024
- Reserved
- Nov 9, 2017
Description
Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via ADS. This special command supports encrypted authentication with username/password. The encryption uses a fixed key, that could be extracted by an attacker. Precondition of the exploitation of this weakness is network access at the moment a route is added.
Scores
The record has no CVSS score.
Weaknesses
- CWE-522 Insufficiently Protected Credentials CWE-522
Affected Products
| Product | Versions |
|---|---|
Beckhoff TwinCATICS-CERT |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.