CVE-2014-5415

Published: Oct 5, 2016Modified: May 6, 2026

9.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components might allow remote attackers to obtain access via the (1) Windows CE Remote Configuration Tool, (2) CE Remote Display service, or (3) TELNET service.

Affected (2)

Products: Beckhoff: Embedded Pc Images, Twincat

2 products

Embedded Pc Images

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Beckhoff Embedded Pc Images	All versions
Beckhoff Twincat	All versions

Related CWEs

Exposed Dangerous Method or Function

The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

References (8)

http://www.securityfocus.com/bid/93349

Source: ics-cert@hq.dhs.gov

https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-001.pdf

Source: ics-cert@hq.dhs.gov

https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-002.pdf

Source: ics-cert@hq.dhs.gov

https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2014-003.pdf

Source: ics-cert@hq.dhs.gov

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2016/icsa-16-278-02.json

Source: ics-cert@hq.dhs.gov

https://www.cisa.gov/news-events/ics-advisories/icsa-16-278-02

Source: ics-cert@hq.dhs.gov

http://www.securityfocus.com/bid/93349

Source: af854a3a-2127-422b-91ae-364da2661108

https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.