Unrated severityNVD Advisory· Published Sep 16, 2011· Updated Apr 29, 2026

CVE-2011-3486

Description

Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.

Affected products

Beckhoff/Twincat5 versions
cpe:2.3:a:beckhoff:twincat:2.9:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:beckhoff:twincat:2.9:*:*:*:*:*:*:*
- cpe:2.3:a:beckhoff:twincat:2.10:*:*:*:*:*:*:*
- cpe:2.3:a:beckhoff:twincat:*:*:*:*:*:*:*:*range: <=2.11.0.2004
- cpe:2.3:a:beckhoff:twincat:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:beckhoff:twincat:2.8:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

aluigi.altervista.org/adv/twincat_1-adv.txtnvdExploit
www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-06.pdfnvdUS Government Resource
osvdb.org/75495nvd
securityreason.com/securityalert/8380nvd
exchange.xforce.ibmcloud.com/vulnerabilities/69765nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.048
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000