Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Beckhoff.Device.Manager.XAR, MDP for Beckhoff RT Linux(R), MDP software package for TwinCAT/BSD 0.0.5, 1.7.0.0, 2.5.3 Clear all filters
TI-2025-27690 CVE-2025-41728 · GHSA-3gh2-3c3q-2933

Beckhoff: Information leak via Beckhoff Device Manager

Priority MEDIUM 57

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds r…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00343 Published 2026-01-27 Fixed in 2.5.3, 1.7.0.0 +1 CWE-125
TI-2025-27689 CVE-2025-41727 · GHSA-f6mf-xjgg-34j8

Beckhoff: Performing privileged operations and gaining administrator access

Priority LOW 35

A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00178 Published 2026-01-27 Fixed in 2.5.3, 1.7.0.0 +1 CWE-420
TI-2025-27688 CVE-2025-41726 · GHSA-8283-g649-xjrh

Beckhoff: Arbitrary code execution within privileged processes

Priority MEDIUM 41

A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitra…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00482 Published 2026-01-27 Fixed in 2.5.3, 1.7.0.0 +1 CWE-190