Riskcovery

CVE-2020-12526

BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

State
Published
Severity
5.3 Medium
Published
May 13, 2021
Updated
Sep 16, 2024
Reserved
Apr 30, 2020

Read the record on cve.org

Description

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LCERTVDE

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
TwinCAT OPC UA ServerBeckhoff
  • 2.3.0.12 and earlierAffected
IPC Diagnostics UA ServerBeckhoff
  • 3.1.0.1 and earlierAffected
TF6100Beckhoff
  • 3.3.18 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.