CVE-2015-4051: Critical severity beckhoff ipc diagnostics ua server vulnerability
Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4051?
CVE-2015-4051 is classified as a medium severity vulnerability due to its potential to allow denial of service and unauthorized user creation.
How do I fix CVE-2015-4051?
To fix CVE-2015-4051, upgrade Beckhoff IPC Diagnostics to version 1.8 or later to address the access restriction issues.
What types of attacks can be performed using CVE-2015-4051?
CVE-2015-4051 can be exploited to cause denial of service, create arbitrary users, or execute other unspecified actions through malformed requests.
Is CVE-2015-4051 specific to any particular version of Beckhoff IPC Diagnostics?
Yes, CVE-2015-4051 affects all versions of Beckhoff IPC Diagnostics prior to 1.8.
Can CVE-2015-4051 lead to remote code execution?
CVE-2015-4051 does not directly mention remote code execution, but its exploitation can have severe impacts, including system shutdowns.