CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 14:22.
Filter
1 aktiv1 Advisories gefunden
VDE-2020-019
Beckhoff: EtherLeak in TwinCAT RT network driver
Veröffentlicht
16. Juni 2020
Letzte Aktualisierung
22. Mai 2025
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory content is transmitted within in the padding bytes of the frame. Most likely this memory contains slices from previously transmitted or received frames.
Zusammenfassung der Gegenmaßnahmen
Beckhoff offers software patches for TwinCAT 3.1 and TwinCAT 2.11 on request. These patches will be included in the the next regular releases to the affected software versions. The advisory will be updated upon availability.
Revisionshistorie (4)
Erstveröffentlichung — 16. Juni 2020
Initial revision.
Update A — 6. November 2024
Fix: added self-reference
Update B — 11. April 2025
Fix: version range
Update C — 22. Mai 2025
Fix: added distribution, quotation mark