Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-41176

Beckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSD

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Beckhoff MDP package

Default version status: unaffected

  • 0 to < 1.2.7.0affected

Beckhoff TwinCAT/BSD

Default version status: unaffected

  • 0 to < 14.1.2.0affected

References