Description (CNA)
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Beckhoff Automation / Beckhoff.Device.Manager.XAR | affected 0.0.0 before 2.5.3 |
| Beckhoff Automation / MDP software package for TwinCAT/BSD | affected 0.0.0 before 1.7.0.0 |
| Beckhoff Automation / MDP for Beckhoff RT Linux(R) | affected 0.0.0 before 0.0.5 |
CWE
CWE-125
References
ADP enrichment
No English description supplied.
No references supplied.