CVE-2014-5415criticalCWE-749

CVE-2014-5415: fallo crítico en Beckhoff Embedded PC Images

Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function

Publicada el 05 oct 2016 · Actualizada el 04 nov 2025

Seguir esta CVE + Monitorear Embedded PC Images + Monitorear TwinCAT Components featuring Automation Device Specification communication

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 4.3%

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Productos afectados

Beckhoff · Embedded PC Images Beckhoff · TwinCAT Components featuring Automation Device Specification (ADS) communication

CVEs relacionadas — Beckhoff Embedded PC Images

En el mismo producto, de las más peligrosas a las menos.

CVE-2014-5414CRITICALBeckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication AttemptsEPSS 4.8%

Referencias

https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02 https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02 http://www.securityfocus.com/bid/93349