Read the docs
TI-2025-27664 Aliases CVE-2025-41701GHSA-f4rq-67qh-q636

Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering

Priority LOW 35CWE-502Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00165 5th percentileScored 2026-11-07
Fix Fixed TE1000 | TwinCAT 3 Enineering (Beckhoff): 3.1.4024.67

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BeckhoffTE1000 | TwinCAT 3 Enineeringbefore 3.1.4024.673.1.4024.67Patch availableCNA
  • TE1000 | TwinCAT 3 Enineering VendorBeckhoff Affected before 3.1.4024.67 Fixed in 3.1.4024.67 Patch available CNA

Remediation

  • Fix · CNA TE1000 | TwinCAT 3 Enineering (Beckhoff) Fixed in 3.1.4024.67

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-41701
  2. 2026-10-03 Alias added: GHSA-f4rq-67qh-q636

References

Other 1

  • TI-2011-03066 Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of… CVSS 2.0MEDIUM 5.0
  • TI-2019-12580 Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows… CVSS 3.1CRITICAL 9.8
  • TI-2015-03416 Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in… CVSS 2.0HIGH 9.0
  • TI-2014-04414 Beckhoff Embedded PC Images and TwinCAT Components Improper Restriction of Excessive Authentication Attempts CVSS 3.1CRITICAL 9.1
  • TI-2014-04415 Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function CVSS 3.1CRITICAL 9.1
  • TI-2020-13925 Incorrect Access Control in Beckhoff Automation GmbH & Co. CVSS 3.1CRITICAL 9.8
See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences