Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-41727

Beckhoff: Performing privileged operations and gaining administrator access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Beckhoff Automation Beckhoff.Device.Manager.XAR

Default version status: unaffected

  • 0.0.0 to < 2.5.3affected

Beckhoff Automation MDP software package for TwinCAT/BSD

Default version status: unaffected

  • 0.0.0 to < 1.7.0.0affected

Beckhoff Automation MDP for Beckhoff RT Linux(R)

Default version status: unaffected

  • 0.0.0 to < 0.0.5affected

References