PT-2019-3249 · Beckhoff · Twincat 3.1+1

Andreas Galauner · Publicado 2019-08-07 · Atualizado 2020-02-04 · CVE-2019-5636

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TwinCAT 2 versions prior to 2304 TwinCAT 3.1 versions prior to 4204.0

Description The issue exists due to insufficient input validation in the ADS Discovery Service of TwinCAT software. Exploitation of this issue may allow a remote attacker to cause a partial denial of service by using a specially crafted UDP packet of 0 bytes. When a malformed UDP packet is received, the ADS Discovery Service shuts down, although the TwinCAT devices continue to function normally.

Recommendations For TwinCAT 2 versions prior to 2304, update to version 2304 or later to resolve the issue. For TwinCAT 3.1 versions prior to 4204.0, update to version 4204.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the UDP endpoint to minimize the risk of exploitation.

Exploit

Correção

RCE

Improper Resource Release

Enumeração de Fraquezas

CWE-20

CWE-404

Identificadores relacionados

BDU:2019-03239

CVE-2019-5636

Produtos afetados

Twincat 2

Twincat 3.1

Referências · 5

• 🔥 https://blog.rapid7.com/2019/10/08/r7-2019-32-denial-of-service-vulnerabilities-in-beckhoff-twincat-plc-environment-fixed · Exploit
• https://bdu.fstec.ru/vul/2019-03239 · Nota de Segurança
• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2019-004.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5636 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5636 · Aviso do Fabricante