CyberSecBulletin

Beckhoff vulnerabilities

We track 2 vulnerabilities in Beckhoff products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Beckhoff vulnerabilities

  • 7.8 High severity

    TE1000 | TwinCAT 3 Enineering: Deserialization of Untrusted Data

    CVE-2025-41701Beckhoff

    An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.

  • 7.3 High severity

    MDP package: Buffer Copy without Checking Size of Input

    CVE-2024-41176Beckhoff

    The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.