CVE-2014-5415
highPriorität · verfolgen · 38EPSS 0.043 · 91. PerzentilEUUSEPSS · bewertet 2026-10-28
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationBeckhoff Embedded PC Imagescisa_csaf_ot
Beckhoff also recommends the following mitigation solutions: Update images to build October 22, 2014, or newer, which solve these problems by disabling the services by default. Disable the Windows CE Remote Configuration Tool by deleting the subtree “/remoteadmin.” The configuration of the web server paths can be found in the Windows registry at the path “HKEY_LOCAL_MACHINE\COMM\HTTPD\VROOTS\.” Disable startup of CE Remote Display service (cerdisp.exe) with deleting the registry key containing the “CeRDisp.exe” [-HKEY_LOCAL_MACHINE\init\Launch90]. Disable telnet by setting the registry key [HKEY_LOCAL_MACHINE\Services\TELNETD\Flags] to dword: 4, Restrict ADS communication to trusted networks only.
- MitigationTwinCAT Components featuring Automation Device Specification (ADS) communicationcisa_csaf_ot
Beckhoff also recommends the following mitigation solutions: Update images to build October 22, 2014, or newer, which solve these problems by disabling the services by default. Disable the Windows CE Remote Configuration Tool by deleting the subtree “/remoteadmin.” The configuration of the web server paths can be found in the Windows registry at the path “HKEY_LOCAL_MACHINE\COMM\HTTPD\VROOTS\.” Disable startup of CE Remote Display service (cerdisp.exe) with deleting the registry key containing the “CeRDisp.exe” [-HKEY_LOCAL_MACHINE\init\Launch90]. Disable telnet by setting the registry key [HKEY_LOCAL_MACHINE\Services\TELNETD\Flags] to dword: 4, Restrict ADS communication to trusted networks only.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.3–9.4
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (8)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-16-278-02Beckhoff Embedded PC Images and TwinCAT Components Vulnerabilities2016-07-08icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (15)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.beckhoff.com.cn/cn/default.htm?beckhoff/china.htmPatchcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02cnnvd
- http://www.securityfocus.com/bid/93349enisa_euvd
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdfenisa_euvd
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdfenisa_euvd
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdfenisa_euvd
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.jsonenisa_euvd
- https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan