Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2015-4051
HistoryJun 08, 2015 - 2:59 p.m.

CVE-2015-4051

2015-06-0814:59:12
CWE-284
mitre
web.nvd.nist.gov
44
beckhoff ipc diagnostics
cve-2015-4051
denial of service
remote attack
security vulnerability

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

AI Score

7.5

Confidence

High

EPSS

0.023

Percentile

89.8%

JSON

Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.

Affected configurations

Nvd
Node
beckhoffipc_diagnosticsRange≤1.7
VendorProductVersionCPE
beckhoffipc_diagnostics*cpe:2.3:a:beckhoff:ipc_diagnostics:*:*:*:*:*:*:*:*

Related

nessus 2
zdt 1
checkpoint_advisories 1
nvd 1
exploitdb 1
exploitpack 1
packetstorm 2
prion 1
cvelist 1
nessus
nessus
Beckhoff (CVE-2015-4051) (deprecated)
2022-02-07 00:00:00
Beckhoff Ipc Improper Access Control
2020-05-27 00:00:00
zdt
zdt
Beckhoff CX9020 CPU Module - Remote Code Execution Exploit
2015-10-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Beckhoff IPC Diagnostics Denial Of Service (CVE-2015-4051)
2021-05-10 00:00:00
nvd
nvd
CVE-2015-4051
2015-06-08 14:59:12
exploitdb
exploitdb
Beckhoff CX9020 CPU Module - Remote Code Execution
2015-10-22 00:00:00
exploitpack
exploitpack
Beckhoff CX9020 CPU Module - Remote Code Execution
2015-10-22 00:00:00
packetstorm
packetstorm
Beckoff CX9020 CPU Model Remote Code Execution
2015-10-23 00:00:00
Beckhoff IPC Diagnositcs Authentication Bypass
2015-06-05 00:00:00
prion
prion
Design/Logic Flaw
2015-06-08 14:59:00
cvelist
cvelist
CVE-2015-4051
2015-06-08 14:00:00

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

AI Score

7.5

Confidence

High

EPSS

0.023

Percentile

89.8%

JSON
Related for CVE-2015-4051
nessus2zdt1checkpoint_advisories1nvd1exploitdb1exploitpack1packetstorm2prion1cvelist1