CVE-2020-12526 BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server
Attackers can cause denial of service in Beckhoff TwinCAT and IPC Diagnostics OPC UA servers by sending crafted requests, rendering the server unresponsive.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-12526?
CVE-2020-12526 is a medium-severity denial of service vulnerability in Beckhoff IPC Diagnostics UA Server, published on 13 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.
Weakness: CWE-20
Which versions are affected by CVE-2020-12526?
It affects 3 products.
Products include Beckhoff Ipc Diagnostics Ua Server, Beckhoff Tf6100, Beckhoff Twincat Opc Ua Server.
How do I fix CVE-2020-12526?
No fix has been published for CVE-2020-12526 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-12526 being exploited?
There is no known exploitation of CVE-2020-12526 in the wild and no public exploit code.
Sources
Also known as GHSA-53xf-f462-gx5v.