CVE-2019-5637: Beckhoff Twincat

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior).

Affected products

• Beckhoff Twincat: version 3.1.4022.30 only; version 3.1.4022.29 only

Published 2019-11-21. Last modified 2026-06-17.