CVE-2021-34594CWE-23

Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server

Medium · published November 4, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01126 · 66.1th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2021-11-04T09:50Z
EPSS history
Timeline
  • 04 NOV 09:50Z
    Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server
    cvelistv5