VULNERABILITY INTELLIGENCE

CVE-2017-16726

CVSS score9.1 CRITICAL
EPSS probability0.51%
CISA KEVNot currently listed
Published2018-06-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.

Weakness classification

  • CWE-285: Improper Authorization
  • CWE-326: Inadequate Encryption Strength

Primary references