Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-3486.
PoCs published by Luigi Auriemma, Luigi Auriemma, jfa, including Metasploit module auxiliary/dos/scada/beckhoff_twincat.
AI-analyzed exploit summary This exploit triggers a Denial of Service (DoS) in Beckhoff TwinCAT by sending a malformed UDP packet to port 48899, causing an invalid read access. The provided command uses a custom tool (udpsz) to send the crafted payload.
Description
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.
Exploits (2)
This exploit triggers a Denial of Service (DoS) in Beckhoff TwinCAT by sending a malformed UDP packet to port 48899, causing an invalid read access. The provided command uses a custom tool (udpsz) to send the crafted payload.
This Metasploit module exploits a DoS vulnerability in Beckhoff TwinCAT SCADA PLC by sending a crafted UDP packet to port 48899, causing an access violation in TCATSysSrv.exe. The payload consists of a specific byte sequence followed by a large buffer of null and 0xFF bytes.