CVE-2025-41727 — Beckhoff: Performing privileged operations and gaining administrator access

CVE-2025-41727

Beckhoff: Performing privileged operations and gaining administrator access PUBLISHED

Description (CNA)

A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.

Affected (CNA)

Vendor / product	Versions
Beckhoff Automation / Beckhoff.Device.Manager.XAR	affected 0.0.0 before 2.5.3
Beckhoff Automation / MDP software package for TwinCAT/BSD	affected 0.0.0 before 1.7.0.0
Beckhoff Automation / MDP for Beckhoff RT Linux(R)	affected 0.0.0 before 0.0.5

CWE

CWE-420

References

https://certvde.com/de/advisories/VDE-2025-092

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.