PatchTheCVEbeckhoff vulnerabilities
Recent CVEs affecting beckhoff products. 5 tracked.
beckhoff has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-08-27. Highest priority: CVE-2024-41176 (score 30/100).
- CVE-2024-41176 HIGH 7.3 UPGRADE UPGRADE The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Den
- CVE-2024-41175 MEDIUM 5.5 UPGRADE UPGRADE The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low
- CVE-2024-41174 HIGH 7.3 UPGRADE UPGRADE The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged
- CVE-2024-41173 HIGH 7.8 UPGRADE UPGRADE The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low pr
- CVE-2023-6545 MEDIUM 4.7 UPGRADE The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote u
FAQ
How do I fix beckhoff vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is beckhoff being exploited right now?
None of the tracked beckhoff CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which beckhoff CVE should I patch first?
CVE-2024-41176 currently ranks highest (30/100): The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Den.