NVD

Id
25592  
Name
CVE-2015-4051  
Description
Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:C)  
Pub Date
2017-01-19  
Published
2015-06-08  
Modified Date
2016-12-30  
Seq
2015-4051  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
135411 25592 CVE-2015-4051 http://ftp.beckhoff.com/download/document/IndustPC/Advisory-2015-001.pdf  View
135412 25592 CVE-2015-4051 http://packetstormsecurity.com/files/132168/Beckhoff-IPC-Diagnositcs-Authentication-Bypass.html  View
135413 25592 CVE-2015-4051 http://packetstormsecurity.com/files/134071/Beckoff-CX9020-CPU-Model-Remote-Code-Execution.html  View
135414 25592 CVE-2015-4051 20150604 [CVE-2015-4051]: Beckhoff IPC diagnostics < 1.8 : Authentication bypass  View
135415 25592 CVE-2015-4051 75042  View
135416 25592 CVE-2015-4051 http://www.thesecurityfactory.be/permalink/beckhoff-authentication-bypass.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7642 JVNDB-2015-002962 Beckhoff IPC Diagnostics におけるサービス運用妨害 (DoS) の脆弱性 Beckhoff IPC Diagnostics は、/config の機能へのアクセスを適切に制限しないため、サービス運用妨害 (リブートまたはシャットダウン) 状態にされる、任意のユーザを作成されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-4051 81276 CVE-2015-4051 25592 9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002962.html 2015-05-21 2015-06-10 View