What is CVE-2019-5637?

CVE-2019-5637 is a high-severity vulnerability in Beckhoff Twincat, classified under Divide By Zero. CVSS score: 7.5/10. Published 2019-11-21.

How severe is CVE-2019-5637?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Beckhoff Twincat

CVE-2019-5637

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 v…

EPSS: 0.014 (70.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Beckhoff Twincat — versions 3.1.4022.30, 3.1.4022.29
Beckhoff Twincat 2 — versions 2304
Beckhoff Twincat 3.1 — versions 4204.0
Beckhoff Twincat_cx2030
Beckhoff Twincat_cx5140

Weakness classification (CWE)

CWE-369 — Divide By Zero

References

cve@rapid7.com (Exploit, Third Party Advisory, x_refsource_MISC)
cve@rapid7.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5637?: CVE-2019-5637 is a high-severity vulnerability in Beckhoff Twincat, classified under Divide By Zero. CVSS score: 7.5/10. Published 2019-11-21.
How severe is CVE-2019-5637?: High severity. CVSS v3 base score is 7.5 out of 10.