What’s Vulnerable › Vulnerabilities
CVE-2017-16718
- Severity: medium (CVSS 5.9 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-06-27 · updated 2026-06-17
- Weakness: CWE-522
Description
Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via ADS. This special command supports encrypted authentication with username/password. The encryption uses a fixed key, that could be extracted by an attacker. Precondition of the exploitation of this weakness is network access at the moment a route is added.
Affected products
References
- https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-002.pdf
- https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-002.pdf
Get alerted when CVE-2017-16718 or the next vulnerability affects your stack