CVE-2020-20741 - CVE House
Back to Database
Status published Critical CVE-2020-20741

Incorrect Access Control in Beckhoff Automation GmbH & Co. KG...

Vulnerability Description

Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version CX9020_CB3011_WEC7_HPS_v602_TC31_B4016.6 allows remote attackers to bypass authentication via the "CE Remote Display Tool" as it does not close the incoming connection on the Windows CE side if the credentials are incorrect.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-20741

Credits & Attribution

No credits recorded in the NVD database.

References

More from beckhoff

View All →
CVE-2020-9464
A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler...
High 7.5
CVE-2019-16871
Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on...
Critical 9.8
CVE-2015-4051
Beckhoff IPC Diagnostics before 1.8 does not properly restrict access...
Critical 9
CVE-2011-3486
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause...
Medium 5

Affected Vendor

Affected Software

cx9020
Vulnerable Versions:
6.02

Timeline

Official Publish: July 23rd, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.