Share: Email | Twitter

ID

VDE-2019-019

Published

2019-10-09 09:25 (CEST)

Last update

2024-07-18 13:02 (CEST)

Vendor(s)

Beckhoff Automation GmbH & Co. KG

Product(s)

Article No° Product Name Affected Version(s)
TwinCAT 2 <= 2304
TwinCAT 3.1 <= 4024.0

Summary

In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.

CVE ID

CVE-2019-5637 

Last Update:

18. Februar 2020 13:08

Severity

7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) 

Weakness

Divide By Zero  (CWE-369) 

Summary

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior).

Details

nvd.nist.gov 

Impact

TwinCAT includes a Profinet driver, which could be configured in the engineering environment to use Profinet connections to the controller.

In case this is configured and the controller is started, a specially crafted Profinet DCP packet could be sent to the TwinCAT device, which will lead to a denial of service of the device.

Operation can be resumed by restarting the device.

Solution

Profinet could be blocked in perimeter firewall to block PROFINET DCP packets from untrusted networks to the device.

Beckhoff will provide updates for the mentioned TwinCAT Versions.

Reported by

Beckhoff Automation thanks Andreas Galauner from Rapid7 for support and efforts within coordinated disclousure.