CVE-2014-5414
highPriorität · verfolgen · 38EPSS 0.048 · 92. PerzentilEUUSEPSS · bewertet 2026-10-28
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationBeckhoff Embedded PC Imagescisa_csaf_ot
Beckhoff also recommends the following mitigation solutions: Update images to build October 22, 2014, or newer, which solve these problems by disabling the services by default. Disable the Windows CE Remote Configuration Tool by deleting the subtree “/remoteadmin.” The configuration of the web server paths can be found in the Windows registry at the path “HKEY_LOCAL_MACHINE\COMM\HTTPD\VROOTS\.” Disable startup of CE Remote Display service (cerdisp.exe) with deleting the registry key containing the “CeRDisp.exe” [-HKEY_LOCAL_MACHINE\init\Launch90]. Disable telnet by setting the registry key [HKEY_LOCAL_MACHINE\Services\TELNETD\Flags] to dword: 4, Restrict ADS communication to trusted networks only.
- MitigationTwinCAT Components featuring Automation Device Specification (ADS) communicationcisa_csaf_ot
Beckhoff also recommends the following mitigation solutions: Update images to build October 22, 2014, or newer, which solve these problems by disabling the services by default. Disable the Windows CE Remote Configuration Tool by deleting the subtree “/remoteadmin.” The configuration of the web server paths can be found in the Windows registry at the path “HKEY_LOCAL_MACHINE\COMM\HTTPD\VROOTS\.” Disable startup of CE Remote Display service (cerdisp.exe) with deleting the registry key containing the “CeRDisp.exe” [-HKEY_LOCAL_MACHINE\init\Launch90]. Disable telnet by setting the registry key [HKEY_LOCAL_MACHINE\Services\TELNETD\Flags] to dword: 4, Restrict ADS communication to trusted networks only.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.3–9.4
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (8)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-16-278-02Beckhoff Embedded PC Images and TwinCAT Components Vulnerabilities2016-07-08icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (15)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.beckhoff.com.cn/cn/default.htm?beckhoff/china.htmPatchcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02cnnvd
- http://www.securityfocus.com/bid/93349enisa_euvd
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdfenisa_euvd
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdfenisa_euvd
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdfenisa_euvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.jsonenisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan