CVE-2024-41175

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privileged attacker.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert.vde.com/en/advisories/VDE-2024-049/	Mitigation Third Party Advisory
https://infosys.beckhoff.com/content/1033/twincat_bsd/11780818443.html?id=4222392218353411614	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:beckhoff:ipc_diagnostics_package::::::::
	cpe:2.3:o:beckhoff:twincat\/bsd::::::::

History

12 Sep 2024, 14:25

Type	Values Removed	Values Added
CPE		cpe:2.3:o:beckhoff:twincat\/bsd:::::::: cpe:2.3:a:beckhoff:ipc_diagnostics_package::::::::
References	~~() https://cert.vde.com/en/advisories/VDE-2024-049/ -~~	() https://cert.vde.com/en/advisories/VDE-2024-049/ - Mitigation, Third Party Advisory
References	~~() https://infosys.beckhoff.com/content/1033/twincat_bsd/11780818443.html?id=4222392218353411614 -~~	() https://infosys.beckhoff.com/content/1033/twincat_bsd/11780818443.html?id=4222392218353411614 - Vendor Advisory
First Time		Beckhoff ipc Diagnostics Package Beckhoff Beckhoff twincat\/bsd

27 Aug 2024, 13:01

Type	Values Removed	Values Added
Summary		(es) El paquete IPC-Diagnostics incluido en TwinCAT/BSD es vulnerable a un ataque de denegación de servicio local por parte de un atacante con pocos privilegios.

27 Aug 2024, 08:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-27 08:15

Updated : 2024-09-12 14:25

NVD link : CVE-2024-41175

Mitre link : CVE-2024-41175

CVE.ORG link : CVE-2024-41175

JSON object : View

Products Affected

beckhoff

ipc_diagnostics_package
twincat\/bsd

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

5.5 /10