Description
The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local
attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in
the context of user “root” via a crafted HTTP request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beckhoff | MDP package | < 1.2.7.0 | 1.2.7.0 |
| Beckhoff | TwinCAT/BSD | < 14.1.2.0 | 14.1.2.0 |
Advisories 1
References
- https://cert.vde.com/en/advisories/VDE-2024-050 vendor-advisory