Vulnerability details
CVE-2025-41726
Beckhoff Automation Beckhoff.Device.Manager.XARBeckhoff Automation MDP for Beckhoff RT LinuxBeckhoff Automation MDP software package for TwinCAT/BSD
Beckhoff: Arbitrary code execution within privileged processes
CVSS 3.1
8.8High
Official description
A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (CERTVDE) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Beckhoff Automation | Beckhoff.Device.Manager.XAR | v < 2.5.3 | CVEProject cvelistV5 (CNA) |
| Beckhoff Automation | MDP for Beckhoff RT Linux(R) | v < 0.0.5 | CVEProject cvelistV5 (CNA) |
| Beckhoff Automation | MDP software package for TwinCAT/BSD | v < 1.7.0.0 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-01-27
- Last updated
- 2026-01-27
- State
- Published
- Assigner (CNA)
- CERTVDE
Exploit prediction (EPSS)
0.48%
Probability of exploitation in 30 days
41.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-190Integer Overflow or Wraparound