CVE-2017-16726: Weak Encryption
Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16726?
CVE-2017-16726 is considered a medium severity vulnerability due to the lack of encryption in the ADS protocol used by Beckhoff TwinCAT.
How do I fix CVE-2017-16726?
To mitigate CVE-2017-16726, you should implement network segmentation and apply strict firewall rules to limit access to the affected systems.
What systems are affected by CVE-2017-16726?
CVE-2017-16726 affects Beckhoff TwinCAT Extended Automation Runtime and products that utilize the ADS protocol.
What are the risks associated with CVE-2017-16726?
The risks associated with CVE-2017-16726 include unauthorized access and manipulation of industrial automation systems due to unencrypted communication.
Is encryption available for ADS in CVE-2017-16726?
No, ADS in CVE-2017-16726 does not support encryption, as it was designed for performance rather than security.