Vulnerabilities > Beckhoff > Twincat > 3.0

DATE CVE VULNERABILITY TITLE RISK
2019-12-19 CVE-2019-16871 Authentication Bypass by Spoofing vulnerability in Beckhoff Twincat 2.0/3.0/3.1
Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.
network
low complexity
beckhoff CWE-290
critical
9.8
2018-06-27 CVE-2017-16718 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Beckhoff Twincat 3.0
Beckhoff TwinCAT 3 supports communication over ADS.
network
high complexity
beckhoff CWE-327
5.9