CVE-2024-41176 — Beckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSD

CVE-2024-41176

Beckhoff: Local Denial of Service issue in package MDP included in TwinCAT/BSD PUBLISHED

Description (CNA)

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.

Affected (CNA)

Vendor / product	Versions
Beckhoff / MDP package	affected 0 before 1.2.7.0
Beckhoff / TwinCAT/BSD	affected 0 before 14.1.2.0

CWE

CWE-120

References

https://cert.vde.com/en/advisories/VDE-2024-050

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.