Beckhoff TwinCAT/BSD Vulnerabilities Expose PLCs to Tampering, DoS Attacks

August 29, 2024 at 08:06AM Nozomi Networks discovered vulnerabilities in Beckhoff Automation’s TwinCAT/BSD operating system. The Device Manager component has four vulnerabilities, including ‘high severity’ flaws that can be exploited for authentication bypass and cross-site scripting attacks, potentially compromising the PLC administrator’s password. There are also ‘medium severity’ vulnerabilities allowing for PLC denial of service … Read more