<= TwinCAT 2 Build 2304
<= TwinCAT 3.1 Build 4024.0
In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.
TwinCAT includes a Profinet driver, which could be configured in the engineering environment to use Profinet connections to the controller.
In case this is configured and the controller is started, a specially crafted Profinet DCP packet could be sent to the TwinCAT device, which will lead to a denial of service of the device.
Operation can be resumed by restarting the device.
Profinet could be blocked in perimeter firewall to block PROFINET DCP packets from untrusted networks to the device.
Beckhoff will provide updates for the mentioned TwinCAT Versions.
Beckhoff Automation thanks Andreas Galauner from Rapid7 for support and efforts within coordinated disclousure.