CVE-2019-5637: Beckhoff TwinCAT Profinet Driver Divide-by-Zero Denial of Service

Published Nov 21, 2019

Updated

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior).

Affected Software

4 affected components

Beckhoff Twincat=3.1.4022.30

Beckhoff Twincat Cx2030

Beckhoff Twincat Cx5140

Beckhoff Twincat=3.1.4022.29

Event History

Nov 21, 2019

CVE Published

via MITRE·07:16 PM

Data Sourced

via MITRE·07:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-5637?

CVE-2019-5637 has a severity rating that indicates it can lead to a denial of service condition.

How do I fix CVE-2019-5637?

To fix CVE-2019-5637, update to Beckhoff TwinCAT versions later than 3.1.4022.30 or 3.1.4022.29.

What software is affected by CVE-2019-5637?

CVE-2019-5637 affects Beckhoff TwinCAT 2 version 2304 and TwinCAT 3.1 versions prior to 4204.0.

What kind of attack is associated with CVE-2019-5637?

CVE-2019-5637 is associated with a denial of service attack that occurs through malformed UDP packets.

Is CVE-2019-5637 a local or remote vulnerability?

CVE-2019-5637 is a remote vulnerability, as it requires sending a packet to the device over the network.