Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-41726

Beckhoff: Arbitrary code execution within privileged processes

A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Beckhoff
Products
Beckhoff.device.manager.xar Mdp Package Twincat and 1 more
CVE-2025-41727

Beckhoff: Performing privileged operations and gaining administrator access

A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Beckhoff
Products
Beckhoff.device.manager.xar Mdp Package Twincat and 1 more
CVE-2025-41728

Beckhoff: Information leak via Beckhoff Device Manager

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Beckhoff
Products
Beckhoff.device.manager.xar Mdp Package Twincat and 1 more
CVE-2024-41176

Beckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSD

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Beckhoff
Products
Mdp Package Twincat\/bsd