VDE-2019-019

Beckhoff: TwinCAT Denial-of-Service in Profinet driver

view advisory published 2019-10-09

In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-5637US	high7.5	1.43% (73rd)	—	2019-11-21
When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue a…

references

External citations — patches, advisories, analysis.

VDE-2019-019: Beckhoff: TwinCAT Denial-of-Service in Profinet driver - CSAFself
VDE-2019-019: Beckhoff: TwinCAT Denial-of-Service in Profinet driver - HTMLself
CERT@VDE Security Advisories for Beckhoffexternal

remediations (1)

Fixed
Profinet could be blocked in perimeter firewall to block PROFINET DCP packets from untrusted networks to the device. Beckhoff will provide updates for the mentioned TwinCAT Versions.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan