Beckhoff Device Manager Vulnerabilities: RCE, Privilege Escalation, OOB Read (CVE-2025-41726/27/28)

Critical Vulnerability Information Vulnerability Overview Vulnerability ID: VDE-2025-092 Release Date: 27.01.2026 12:00 Vendor: Beckhoff Automation GmbH & Co. KG External ID: VDE-2025-092 CSAF Document Download: Download --- Vulnerability Details CVE-2025-41726 - An attacker can execute arbitrary code by sending specially crafted requests to the web service of the Beckhoff Device Manager or locally via an API, and can trigger integer overflows, which may lead to arbitrary code execution within privileged processes. - CVSS Score: 8.8 CVE-2025-41727 - A user with low privileges on the device can bypass the UI authentication mechanism and send commands to a privileged process, which executes them on behalf of the user but with elevated privileges. - CVSS Score: 7.8 CVE-2025-41728 - An attacker can cause an out-of-bounds read operation within a specific service process running on the device. - CVSS Score: 5.3 --- Affected Products --- Mitigation Measures Upgrade to the latest versions of the affected components (see table below) or update the complete operating system image. Revoked versions: - Beckhoff.Device.Manager.XAR tcpkg package: 2.5.3 - Beckhoff IPC Diagnostics software for Windows: 2.5.3 - MDP.dll library for Windows CE 6.0 and Embedded Compact 7 on x86: 1.7.0.0 - MDP software package for TwinCAT/BSD: 1.7.0.0 - mdp-bhf software package Beckhoff RT Linux(R): 0.0.5-1 - MDP.dll library for Windows CE 6.0 and Embedded Compact 7 on ARM32: 1.7.0.0 For further details, contact Beckhoff Service (service@beckhoff.com).

Goal Reached Thanks to every supporter — we hit 100%!

Beckhoff Device Manager Vulnerabilities: RCE, Privilege Escalation, OOB Read (CVE-2025-41726/27/28)