Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2015-06-08T14:00:00
Updated: 2016-12-29T18:57:01
Reserved: 2015-05-21T00:00:00
Link: CVE-2015-4051
JSON object: View
NVD Information
Status : Modified
Published: 2015-06-08T14:59:12.790
Modified: 2016-12-31T02:59:31.580
Link: CVE-2015-4051
JSON object: View
Redhat Information
No data.
CWE