CVE-2020-12494

CVE-2020-12494 affects Beckhoff TwinCAT RT network drivers for Intel 8254x and 8255x, which provide EtherCAT functionality. The vulnerability arises because the driver fails to pad Ethernet frames below the minimum size, instead transmitting arbitrary memory content in the padding bytes. This memory disclosure, triggered by small ICMP echo requests, could expose slices of previously transmitted or received frames. Rated as Medium severity (CVSS 5.3), this vulnerability has a network attack vector and low attack complexity, requiring no privileges or user interaction. The primary impact is limited to confidentiality (C:L), as it allows for memory content disclosure, though an attacker has little control over the specific data revealed. There is no impact on integrity or availability. Currently, there is no known active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community attention, with no social media discussion or media coverage, and is not listed on the CISA KEV catalog.