CVEvulnerability

CVE-2014-5415

9.1 CRITICAL Published 2016-10-05 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2016-10-05
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.0 ([email protected]): 9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected]): 9.4 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:N
Weaknesses: CWE-264, CWE-749

Description

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.

Affected configurations

• beckhoff embedded pc images • beckhoff twincat

Weakness · not in database (1)

CWE-264

Weakness · CWE (1)

CWE-749 Exposed Dangerous Method or Function weakness

References

http://www.securityfocus.com/bid/93349 www.securityfocus.com
https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf download.beckhoff.com
https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf download.beckhoff.com
https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf download.beckhoff.com
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json github.com
https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02 www.cisa.gov
http://www.securityfocus.com/bid/93349 www.securityfocus.com
https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02 Third Party Advisory, US Government Resource