MDP software package for TwinCAT/BSD vulnerabilities

2 known vulnerabilities in MDP software package for TwinCAT/BSD from Beckhoff Automation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Beckhoff.Device.Manager.XAR: Unprotected Alternate Channel

  CVE-2025-41727Jan 27, 2026Beckhoff Automation

  A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.

• 8.8 High severity

  Beckhoff.Device.Manager.XAR: Integer Overflow or Wraparound

  CVE-2025-41726Jan 27, 2026Beckhoff Automation

  A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged proc