CVE-2017-16718

CVE-2017-16718 describes a vulnerability in Beckhoff TwinCAT 3, where the ADS protocol's remote route configuration uses a fixed encryption key for authentication. An attacker with network access during route addition could extract this key, potentially compromising the system. Rated Medium severity (CVSS 5.9), the attack requires high complexity due to the precondition of network access during a specific event, but could lead to high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.