Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-34594

Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Beckhoff Automation TwinCAT OPC UA Server

  • TF6100 to < 4.3.48.0affected
  • TS6100 to < 4.3.48.0affected
  • TcOpcUaServer version to < 3.2.0.19423affected

References