Mdp Software Package For Twincat/Bsd
Approved changes feed: RSS · Atom
cpe:2.3:a:beckhoff_automation:mdp_software_package_for_twincat/bsd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Beckhoff Automation (bd88e854-65a2-59af-96cb-6ca10b468a80) |
|---|---|
| Product | Mdp Software Package For Twincat/Bsd (c69781dc-f4b1-5750-b142-107db5b9eae5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41728 |
vulnerable | 2026-06-08 07:25:07.881226 |
Beckhoff: Information leak via Beckhoff Device Manager
MEDIUM (5.3)
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.
Published: 2026-01-27T11:37:55.689Z
Updated: 2026-01-27T13:49:51.297Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41727 |
vulnerable | 2026-06-08 07:25:07.880790 |
Beckhoff: Performing privileged operations and gaining administrator access
HIGH (7.8)
A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.
Published: 2026-01-27T11:36:54.619Z
Updated: 2026-01-27T13:53:55.876Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41726 |
vulnerable | 2026-06-08 07:25:07.879575 |
Beckhoff: Arbitrary code execution within privileged processes
HIGH (8.8)
A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.
Published: 2026-01-27T11:35:37.391Z
Updated: 2026-01-27T14:08:37.385Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.