CVE-2020-12526

MEDIO 5.3CVE-2020-12526 · Published 13/05/2021 · updated 17/06/2026

In breve

CVE-2020-12526 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda ipc diagnostics ua server (beckhoff), tf6100 (beckhoff), twincat opc ua server (beckhoff).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.95%, superiore al 61.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ipc diagnostics ua server beckhoff	`≤ 3.1.0.1`	No fix yet
tf6100 beckhoff	`≤ 3.3.18`	No fix yet
twincat opc ua server beckhoff	`≤ 2.3.0.12`	No fix yet

Description

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.

References

cert.vde.com/en-us/advisories/vde-2020-051 · Third Party Advisory
download.beckhoff.com/download/Document/product-security/Advisories/advisory-2021-001.pdf · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free