Description
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Beckhoff Automation Beckhoff.Device.Manager.XAR
Default version status: unaffected
0.0.0 to < 2.5.3affected
Beckhoff Automation MDP software package for TwinCAT/BSD
Default version status: unaffected
0.0.0 to < 1.7.0.0affected
Beckhoff Automation MDP for Beckhoff RT Linux(R)
Default version status: unaffected
0.0.0 to < 0.0.5affected