Back to overview

Beckhoff: BK9000 couplers - Denial of service inhibits function

VDE-2020-005
Last update
05/22/2025 15:03
Published at
03/10/2020 14:17
Vendor(s)
Beckhoff Automation GmbH & Co. KG
External ID
VDE-2020-005
CSAF Document
Download

Summary

The coupler's function could be inhibited by an attack.

Impact

The coupler's function could be inhibited by a denial of service attack. The coupler will not recover after the attack has stopped.
A reboot of the device recovers the operation.

Affected Product(s)

Model no. Product name Affected versions
BK9000 vers:all/*

Vulnerabilities

Expand / Collapse all

Published
08/25/2026 10:58
Vulnerability characterization
7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
This advisory characterizes the vulnerability differently from the official CVE record. For full details, please see the CSAF document.
Weakness
Uncontrolled Resource Consumption (CWE-400)
Summary

A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by rebooting.

References
cve.org | nvd.nist.gov

Mitigation

Beckhoff will not change this behaviour.
Customers should configure a perimeter firewall to block traffic from untrusted networks to the device.

Acknowledgments

Beckhoff Automation GmbH & Co. KG thanks the following parties for their efforts:

  • CERT@VDE for coordination (see https://certvde.com )
  • Martin Menschner from Rhebo GmbH for support and efforts within coordinated disclousure.

Revision History

Version Date Summary
1 03/10/2020 14:17 Initial revision.
2 01/16/2025 11:00 Fix: list of branches, typo in references url
3 04/11/2025 09:00 Fix: version range
4 05/22/2025 15:03 Fix: quotation mark