CVE Catalog

CVE-2014-5414

Critical
Published: Translated: NVD NIST

Summary

Beckhoff Embedded PC images before October 22, 2014, and ADS TwinCAT components do not restrict the number of authentication attempts, making it easier for remote attackers to gain access via a brute-force attack.

Risk Assessment

The lack of limits on login attempts increases the risk of successful attacks, potentially leading to unauthorized access to systems.

Recommendation

It is recommended to implement limits on the number of authentication attempts and to monitor logs for suspicious activities.

Original NVD description (English source)

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS