Approved changes feed: RSS · Atom

cpe:2.3:a:beckhoff:twincat_driver_for_intel_8255x_(tcl8255x.sys):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBeckhoff (c7a6f774-e924-5a6b-a1dd-a9380612d095)
ProductTwincat Driver For Intel 8255X (Tcl8255X.Sys) (95f7266b-3f7b-592e-b14c-3e0f26558d51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12494 vulnerable 2026-06-03 14:41:34.671980 Beckhoff: Etherleak in TwinCAT RT network driver
MEDIUM (5.3)
Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are not padded if their payload is less than the minimum Ethernet frame size. Instead, arbitrary memory content is transmitted within in the padding bytes of the frame. Most likely this memory contains slices from previously transmitted or received frames. By this method, memory content is disclosed, however, an attacker can hardly control which memory content is affected. For example, the disclosure can be provoked with small sized ICMP echo requests sent to the device.
Published: 2020-06-16T13:28:38.000Z
Updated: 2024-08-04T11:56:52.090Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.