CVE-2014-5415criticalCWE-749

CVE-2014-5415: falha crítica em Beckhoff Embedded PC Images

Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function

Publicada em 05 out 2016 · Atualizada em 04 nov 2025

Seguir esta CVE + Monitorar Embedded PC Images + Monitorar TwinCAT Components featuring Automation Device Specification communication

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 4.3%

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

Beckhoff · Embedded PC Images Beckhoff · TwinCAT Components featuring Automation Device Specification (ADS) communication

CVEs relacionadas — Beckhoff Embedded PC Images

No mesmo produto, das mais perigosas para as menos.

CVE-2014-5414CRITICALBeckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication AttemptsEPSS 4.8%

Referências

https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02 https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02 http://www.securityfocus.com/bid/93349