Read the docs
TI-2024-08294 Aliases CVE-2024-8934GHSA-w672-pp4p-44p3

Beckhoff: Local command injection via TwinCAT Package Manager

Priority LOW 30CWE-78Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

A local user with administrative access rights can enter specialy crafted values for settings at the user interface (UI) of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00188 8th percentileScored 2026-11-07
Fix Fixed TwinCAT Package Manager (Beckhoff): 1.0.603.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BeckhoffTwinCAT Package Managerbefore 1.0.603.01.0.603.0Patch availableCNA
  • TwinCAT Package Manager VendorBeckhoff Affected before 1.0.603.0 Fixed in 1.0.603.0 Patch available CNA

CPE names CISA-ADP · 1

CPEVersionsRoleVendor
cpe:2.3:a:beckhoff:twincat_packet_manager:*:*:*:*:*:*:*:*——Beckhoff
  • cpe:2.3:a:beckhoff:twincat_packet_manager:*:*:*:*:*:*:*:* Versions — — ·Beckhoff

Remediation

  • Fix · CNA TwinCAT Package Manager (Beckhoff) Fixed in 1.0.603.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-8934
  2. 2026-10-03 Alias added: GHSA-w672-pp4p-44p3

References

Other 1

  • TI-2011-03066 Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of… CVSS 2.0MEDIUM 5.0
  • TI-2019-12580 Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows… CVSS 3.1CRITICAL 9.8
  • TI-2015-03416 Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in… CVSS 2.0HIGH 9.0
  • TI-2014-04414 Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts CVSS 3.1CRITICAL 9.1
  • TI-2014-04415 Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function CVSS 3.1CRITICAL 9.1
  • TI-2020-13925 Incorrect Access Control in Beckhoff Automation GmbH & Co. CVSS 3.1CRITICAL 9.8
See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences