{"cvss":0.0,"datePublished":"2020-12-01T00:00:00Z","dateUpdated":"2020-12-01T00:00:00Z","description":"Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.","dueDate":"","id":"CVE-2015-4051","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"ipc_diagnostics","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"beckhoff ipc_diagnostics Improper Access Control","vendor":"beckhoff"}