Beckhoff Automation vulnerabilities
We track 5 vulnerabilities in Beckhoff Automation products across 9 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest Beckhoff Automation vulnerabilities
- 7.8 High severity
TcRouter.sys for Windows on x64 3.1.0.2364: Exposed IOCTL with Insufficient Access Control
A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.
- 7.8 High severity
TcRouter.sys for Windows on x64 3.1.0.2364: Exposed IOCTL with Insufficient Access Control
A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.
- 7.8 High severity
TcRouter.sys for Windows on x64 3.1.0.2364: Exposed IOCTL with Insufficient Access Control
A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.
- 7.8 High severity
Beckhoff.Device.Manager.XAR: Unprotected Alternate Channel
A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.
- 8.8 High severity
Beckhoff.Device.Manager.XAR: Integer Overflow or Wraparound
A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged proc