Beckhoff vulnerabilities
We track 2 vulnerabilities in Beckhoff products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Beckhoff vulnerabilities
- 7.8 High severity
TE1000 | TwinCAT 3 Enineering: Deserialization of Untrusted Data
An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.
- 7.3 High severity
MDP package: Buffer Copy without Checking Size of Input
The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.