CVE-2014-5414— Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts
Quick assessment
Affected
Beckhoff Embedded PC Images
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Beckhoff Embedded PC Images和Automation Device Specification（ADS）TwinCAT Components都是德国倍福（Beckhoff）公司应用于制造业、能源和污水系统等关键基础设施（工控领域）的产品。Beckhoff Embedded PC Images是一套安装在控制柜中且可进行功能配置的工业控制系统。Automation Device Specification（ADS）TwinCAT Components是一款PC实时控制器软件产品。 B
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2014-5414
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts
Source: CVE Program / CVE List V5
Vulnerability Description
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
过多认证尝试的限制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Beckhoff Embedded PC图像和Automation Device Specification TwinCAT组件安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Beckhoff Embedded PC Images和Automation Device Specification（ADS）TwinCAT Components都是德国倍福（Beckhoff）公司应用于制造业、能源和污水系统等关键基础设施（工控领域）的产品。Beckhoff Embedded PC Images是一套安装在控制柜中且可进行功能配置的工业控制系统。Automation Device Specification（ADS）TwinCAT Components是一款PC实时控制器软件产品。 B
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Beckhoff | Embedded PC Images | 0 ~ October 22, 2014 | - |
|
| Beckhoff | TwinCAT Components featuring Automation Device Specification (ADS) communication | All | - |
|
II. Public POCs for CVE-2014-5414
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-5414
请登录查看更多情报信息。
Vendor Advisories for CVE-2014-5414 (3)
Other References for CVE-2014-5414 (1)
-
https://ics-cert.us-cert.gov/advisories/ICSA-16-278-02 x_refsource_MISC
IV. Related Vulnerabilities
Same vendor: Beckhoff
-
CVE-2025-41701
Beckhoff: Deserialization of untrusted data by TwinCAT 3 Eng -
CVE-2024-8934
Beckhoff: Local command injection via TwinCAT Package Manage -
CVE-2024-41176
Beckhoff: Local Denial of Service issue in package MDP inclu -
CVE-2024-41175
Beckhoff: Local Denial-of-Service vulnerability in TwinCAT/B -
CVE-2024-41174
Beckhoff: Improper input neutralization vulnerability in the
Same weakness: CWE-307
-
CVE-2026-75575
Rocket.Chat Missing DDP Rate Limit on the sendForgotPassword -
CVE-2026-78551
RansomLook Login Endpoint Allows Timing-Based Username Enume -
CVE-2026-21755
HCL Hive is affected by a missing rate limit -
CVE-2026-76213
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Thr -
CVE-2026-73529
Plainpad Missing Rate Limiting via POST /v1/sessions
V. Comments for CVE-2014-5414
No comments yet