CVE-2019-16871 Auth bypass in n/a
Attackers can achieve remote code execution with SYSTEM privileges on Beckhoff PLCs and engineering stations via the ADS protocol.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-16871?
CVE-2019-16871 is a critical authentication bypass vulnerability in n/a, published on 19 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.
Weakness: CWE-290
Which versions are affected by CVE-2019-16871?
It affects 1 product.
Products include Beckhoff Twincat.
How do I fix CVE-2019-16871?
No fix has been published for CVE-2019-16871 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-16871 being exploited?
There is no known exploitation of CVE-2019-16871 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-16726 Weak cryptography in Beckhoff TwinCAT
- CVE-2018-7502 Privilege escalation in Beckhoff TwinCAT PLC products
- CVE-2019-5637 Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service
- CVE-2017-16718 Weak cryptography in Beckhoff TwinCAT
- CVE-2020-12494 Beckhoff: Etherleak in TwinCAT RT network driver
Sources
Also known as GHSA-2q68-c93j-vxw8.