CVE-2015-4051

Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.

Score
CVSS 2.0 9.0 Critical
Status
Modified - cve@mitre.org
Published
2015-06-08
Last modified
2024-08-06
Weaknesses
CWE-284

Affected products

References

 
 
© AVABIS GmbH privacypolicy about