CVE-2014-5415

Description

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected products

Beckhoff / Embedded PC Images0 – October 22, 2014
Beckhoff / TwinCAT Components featuring Automation Device Specification (ADS) communicationAll – All

References

MISChttp://www.securityfocus.com/bid/93349
VENDOR_ADVISORYhttps://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf
VENDOR_ADVISORYhttps://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf
VENDOR_ADVISORYhttps://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf
VENDOR_ADVISORYhttps://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02
MISChttps://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json