CVE-2019-16871

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-290

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 19, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-168729.9Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).CVE-2019-168735.4Portainer before 1.22.1 has XSS (issue 1 of 2).CVE-2019-168746.5Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).CVE-2019-168767.5Portainer before 1.22.1 allows Directory Traversal.CVE-2019-168778.8Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).CVE-2019-168785.4Portainer before 1.22.1 has XSS (issue 2 of 2).CVE-2019-168799.8The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical FuCVE-2019-16887.1A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gaCVE-2019-168809.8An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method.CVE-2019-168819.8An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution CVE-2019-168827.5An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated witCVE-2019-168847.5runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/roo
CVE-2019-16871: Critical severity, CVSS 9.8 | Vulnix