PT-2015-6399 · Beckhoff · Beckhoff Ipc Diagnostics

Frank Lycops · Published 2015-06-08 · Updated 2016-12-31 · CVE-2015-4051

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Beckhoff IPC Diagnostics versions prior to 1.8

Description The issue allows remote attackers to cause a denial of service, create arbitrary users, or possibly have other unspecified impacts via a crafted request to the "/upnpisapi" endpoint, specifically by using the "beckhoff.com:service:cxconfig:1#Write" SOAP action.

Recommendations For versions prior to 1.8, update to version 1.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the /config functions and the /upnpisapi endpoint to minimize the risk of exploitation.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-4051

Affected Products

Beckhoff Ipc Diagnostics

References · 7

• 🔥 http://thesecurityfactory.be/permalink/beckhoff-authentication-bypass.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Jun/10 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-4051 · Security Note
• http://ftp.beckhoff.com/download/document/IndustPC/Advisory-2015-001.pdf · Vendor Advisory
• http://securityfocus.com/bid/75042 · Note
• http://packetstormsecurity.com/files/132168/Beckhoff-IPC-Diagnositcs-Authentication-Bypass.html · Note
• http://packetstormsecurity.com/files/134071/Beckoff-CX9020-CPU-Model-Remote-Code-Execution.html · Note