CVE-2017-16726

Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not include any encryption algorithms because of their negative effect on performance and throughput. An attacker can forge arbitrary ADS packets when legitimate ADS traffic is observable.

• CWE-285
• CWE-326

• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-001.pdfVendor Advisory
• https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2017-001.pdfVendor Advisory

Published

Jun 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1672IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable t…
• CVE-2017-16720A Path Traversal issue was discovered in WebAccess versions …
• CVE-2017-16721A Cross-site Scripting issue was discovered in Geovap Relian…6.1
• CVE-2017-16723A Cross-site Scripting issue was discovered in PHOENIX CONTA…
• CVE-2017-16724A Stack-based Buffer Overflow issue was discovered in Advant…
• CVE-2017-16725A Stack-based Buffer Overflow issue was discovered in Xiongm…
• CVE-2017-16727A Credentials Management issue was discovered in Moxa NPort …
• CVE-2017-16728An Untrusted Pointer Dereference issue was discovered in Adv…
• CVE-2017-1673IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulner…
• CVE-2017-16731An Unprotected Transport of Credentials issue was discovered…
• CVE-2017-16732A use-after-free issue was discovered in Advantech WebAccess…
• CVE-2017-16733A SQL Injection issue was discovered in Ecava IntegraXor v 6…