CVE-2025-41701 — Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering

CVE-2025-41701

Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering PUBLISHED

Description (CNA)

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.

Affected (CNA)

Vendor / product	Versions
Beckhoff / TE1000 \| TwinCAT 3 Enineering	affected 0 before 3.1.4024.67

CWE

CWE-502

References

https://certvde.com/en/advisories/VDE-2025-075

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.