Approved changes feed: RSS · Atom

cpe:2.3:a:beckhoff_automation:mdp_for_beckhoff_rt_linux(r):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBeckhoff Automation (bd88e854-65a2-59af-96cb-6ca10b468a80)
ProductMdp For Beckhoff Rt Linux(R) (82e1bde3-f7ee-5dd1-9e53-f443ee231a0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41728 vulnerable 2026-06-08 07:25:07.881345 Beckhoff: Information leak via Beckhoff Device Manager
MEDIUM (5.3)
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.
Published: 2026-01-27T11:37:55.689Z
Updated: 2026-01-27T13:49:51.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41727 vulnerable 2026-06-08 07:25:07.880815 Beckhoff: Performing privileged operations and gaining administrator access
HIGH (7.8)
A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.
Published: 2026-01-27T11:36:54.619Z
Updated: 2026-01-27T13:53:55.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41726 vulnerable 2026-06-08 07:25:07.880408 Beckhoff: Arbitrary code execution within privileged processes
HIGH (8.8)
A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.
Published: 2026-01-27T11:35:37.391Z
Updated: 2026-01-27T14:08:37.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.