VDE-2020-005 — Beckhoff: BK9000 couplers - Denial of service inhibits function

Summary

The coupler's function could be inhibited by an attack.

Details

Impact
The coupler's function could be inhibited by a denial of service attack. The coupler will not recover after the attack has stopped.
A reboot of the device recovers the operation.

Mitigation
Beckhoff will not change this behaviour.
Customers should configure a perimeter firewall to block traffic from untrusted networks to the device.

Vulnerabilities 1

Unscored —

CVE-2020-9464

A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, …

Mar 12, 2020

Revision history

2025-05-22 #4
Fix: quotation mark
2025-04-11 #3
Fix: version range
2025-01-16 #2
Fix: list of branches, typo in references url
2020-03-10 #1
Initial revision.

References

CERT@VDE Security Advisories for Beckhoff Automation
https://certvde.com/en/advisories/vendor/beckhoffautomation/
VDE-2020-005: Beckhoff: BK9000 couplers - Denial of service inhibits function - HTML
https://certvde.com/de/advisories/vde-2020-005/