Vulnerabilities > Beckhoff > Twincat > 2.0

DATE CVE VULNERABILITY TITLE RISK
2019-12-19 CVE-2019-16871 Authentication Bypass by Spoofing vulnerability in Beckhoff Twincat 2.0/3.0/3.1
Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.
network
low complexity
beckhoff CWE-290
critical
9.8
2019-11-21 CVE-2019-5636 Improper Resource Shutdown or Release vulnerability in Beckhoff Twincat 2.0/3.1
When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down.
network
low complexity
beckhoff CWE-404
7.5