What’s Vulnerable › Vulnerabilities

CVE-2017-16726

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-27 · updated 2026-06-17
• Weakness: CWE-285

Description

Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.

Affected products

• ICS-CERT Beckhoff TwinCAT: all versions

References

• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-001.pdf
• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-001.pdf

Get alerted when CVE-2017-16726 or the next vulnerability affects your stack