Beckhoff IPC diagnostics CVE-2015-4051 Multiple Authentication Bypass Vulnerabilities

Bugtraq ID:	75042
Class:	Design Error
CVE:	CVE-2015-4051
Remote:	Yes
Local:	No
Published:	Jun 05 2015 12:00AM
Updated:	Jun 05 2015 12:00AM
Credit:	Frank Lycops
Vulnerable:	Beckhoff IPC diagnostics 0
Not Vulnerable:	Beckhoff IPC diagnostics 1.8.1.0

Beckhoff IPC diagnostics CVE-2015-4051 Multiple Authentication Bypass Vulnerabilities

Beckhoff IPC diagnostics is prone to multiple authentication-bypass vulnerabilities.

An attacker can exploit these issues to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.

Beckhoff IPC diagnostics CVE-2015-4051 Multiple Authentication Bypass Vulnerabilities

References:

• Advisory 2015-001: Potential misuse of IPC Diagnostics < 1.8 backend (Beckhoff)
  
• Beckhoff Home Page (Beckhoff)
  
• Beckhoff IPC diagnostics < 1.8 : Authentication bypass (The Security Factory)