CVEvulnerability
CVE-2019-16871
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-12-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-290
Description
Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.
Affected configurations
• beckhoff twincat (>= 3.0 < 3.1)
• beckhoff twincat 2.0
• beckhoff twincat 3.1
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness
References
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf Vendor Advisory
- https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648 Exploit, Third Party Advisory
- https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf Vendor Advisory
- https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648 Exploit, Third Party Advisory