CVE-2025-41728

mediumPriorität · verfolgen · 0EPSS 0.003 · 28. PerzentilDEEU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.34% (28th) EPSS

CVSS 5.3 · medium

Is it mine?

15 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · beckhoff_psirt

EPSS · bewertet 2026-10-27

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenbeckhoff_psirt
Please update to a recent version of the affected components or update the complete operating system image. Operating system images are available on request from Beckhoff's service (service@beckhoff.com). The setup / installer for Windows 10 and 11 are available on request from Beckhoff's service also.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · info@cert.vde.comAusnutzbarkeit 1.6 · Auswirkung 3.6

v3.15.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · Beckhoff PSIRT DE

v3.14.9mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: poc · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-125USCWE-125US

betroffene Produkte (15)

Betroffene Produkte und Versionsbereiche.

Beckhoff IPC Diagnostics software for Windows 2.5.3alle Versionenfixedbeckhoff_psirtDEcpe:2.3:a:beckhoff:ipc_diagnostics_package:2.5.3:*:*:*:*:Windows:*:*
Beckhoff IPC Diagnostics softwarefor Windows 2.4.5alle Versionenbeckhoff_psirtDEcpe:2.3:a:beckhoff:ipc_diagnostics_package:2.4.5:*:*:*:*:Windows:*:*
Beckhoff.Device.Manager.XAR tcpkg package 2.5.3alle Versionenfixedbeckhoff_psirtDEpkg:tcpkg/beckhoff/Beckhoff.Device.Manager.XAR@2.5.3
Beckhoff.Device.Manager.XAR tcpkg package <2.5.3≤ vers:semver/<2.5.3beckhoff_psirtDEpkg:tcpkg/beckhoff/Beckhoff.Device.Manager.XAR?vers=%3C2.5.3
MDP software package for TwinCAT/BSD 1.7.0.0alle Versionenfixedbeckhoff_psirtDEpkg:bsd/beckhoff/MDP@1.7.0.0
MDP software package for TwinCAT/BSD <1.7.0.0≤ vers:generic/<1.7.0.0beckhoff_psirtDEpkg:bsd/beckhoff/MDP?vers=%3C1.7.0.0
MDP.dll library library for Windows CE 6.0 and Embedded Compact 7 on ARM32 1.7.0.0alle Versionenfixedbeckhoff_psirtDEcpe:2.3:a:beckhoff:MDP.dll:1.7.0.0:*:*:*:*:*:arm32:*
MDP.dll library library for Windows CE 6.0 and Embedded Compact 7 on x86 1.7.0.0alle Versionenfixedbeckhoff_psirtDEcpe:2.3:a:beckhoff:MDP.dll:1.7.0.0:*:*:*:*:*:x86:*
MDP.dll library library for Windows CE 6.0 and Embedded Compact on ARM32 7 1.2.4.0alle Versionenbeckhoff_psirtDEcpe:2.3:a:beckhoff:MDP.dll:1.2.4.0:*:*:*:*:*:arm32:*
MDP.dll library library for Windows CE 6.0 and Embedded Compact on x86 7 1.2.4.0alle Versionenbeckhoff_psirtDEcpe:2.3:a:beckhoff:MDP.dll:1.2.4.0:*:*:*:*:*:x86:*
mdp-bhf software package Beckhoff RT Linux(R) 0.0.5-1alle Versionenfixedbeckhoff_psirtDEpkg:deb/beckhoff/mdp-bhf@0.0.5-1
mdp-bhf software package Beckhoff RT Linux(R) <0.0.5-1≤ vers:generic/<0.0.5-1beckhoff_psirtDEpkg:deb/beckhoff/mdp-bhf?vers=%3C0.0.5-1
Beckhoff Automation Beckhoff.Device.Manager.XAR0.0.0 → 2.5.3enisa_euvdEU
Beckhoff Automation MDP for Beckhoff RT Linux(R)0.0.0 → 0.0.5enisa_euvdEU
Beckhoff Automation MDP software package for TwinCAT/BSD0.0.0 → 1.7.0.0enisa_euvdEU

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

VDE-2025-092Beckhoff: Privilege escalation and information leak via Beckhoff Device Manager2026-01-27csaf · beckhoff_psirtDE
The vulnerability CVE-2025-41726 (NN-2025-0074) allows an authenticated remote user to execute arbitrary commands on the device. This can be exploited over the web UI or via API. In one case the execution of the arbitrary command happens within a privileged process. The vulnerability CVE-2025-41727 (NN-2025-0075) allows a local user with low privileges on the device to bypass the authentication mechanism of the UI and send commands to a privileged process which it executes on behalf of that user but with higher privileges. This way the local user can escalate privileges. The vulnerability CVE-2025-41728 (NN-2025-0076) allows an authenticated remote user to cause an out-of-bounds read operation within a specific service process which runs on the device. The read operation might copy sensitive information from the memory of the specific service into a response message which is then provided to the user but the user cannot choose which information is disclosed.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd beckhoff_psirt NVD CVE.org MITRE

veröffentlicht 2026-01-27geändert 2026-06-17

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan