Summary
In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.
Details
Impact
TwinCAT includes a Profinet driver, which could be configured in the engineering environment to use Profinet connections to the controller.
In case this is configured and the controller is started, a specially crafted Profinet DCP packet could be sent to the TwinCAT device, which will lead to a denial of service of the device.
Operation can be resumed by restarting the device.
Remediation
Profinet could be blocked in perimeter firewall to block PROFINET DCP packets from untrusted networks to the device.
Beckhoff will provide updates for the mentioned TwinCAT Versions.
Vulnerabilities 1
-
High 7.5
Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service
When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and p…
Revision history
-
#4
Fix: added distribution
-
#3
Fix: version range
-
#2
Fix: correct certvde domain, added self-reference
-
#1
Initial revision.
References
-
CERT@VDE Security Advisories for Beckhoff
https://certvde.com/en/advisories/vendor/beckhoff/
-
VDE-2019-019: Beckhoff: TwinCAT Denial-of-Service in Profinet driver - HTML
https://certvde.com/en/advisories/VDE-2019-019