Beckhoff: Denial-of-Service vulnerability in the MDP package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, a user can post specifically crafted input which then causes a buffer overflow on stack which in turn lets the process 'MDPService' crash such that the web interface becomes unavailable until next restart or even execute code in the context of user 'root'.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41176US | — | — | ||
The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local
attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in
the c… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- VDE-2024-050: Beckhoff: Denial-of-Service vulnerability in the MDP package included in TwinCAT/BSD operating system - CSAFself
- VDE-2024-050: Beckhoff: Denial-of-Service vulnerability in the MDP package included in TwinCAT/BSD operating system - HTMLself
- CERT@VDE Security Advisories for Beckhoff Automation GmbH & Co. KGexternal
- Beckhoff Security Advisory 2024-004: Local Denial of Service issue in TwinCAT/BSD package 'MDP' - PDF versionself
- Detailed information on updating the TwinCAT/BSD operating systemexternal
- Additional information about the latest IPC security advisories is provided here:external
Behebungen (2)
- Mitigation
Avoid the existence of user accounts with login permission on the target other than administrator access. By default, TwinCAT/BSD has preconfigured user accounts with lower privileges, but none of them have a password, which results in them being denied login access. Avoid running third-party applications on the target that have not been properly audited, regardless of the user they are running as.
- Behoben
Please update to a recent version of the affected product.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan