Description
A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beckhoff Automation | Beckhoff.Device.Manager.XAR | 0.0.0 – < 2.5.3 | 2.5.3 |
| Beckhoff Automation | MDP software package for TwinCAT/BSD | 0.0.0 – < 1.7.0.0 | 1.7.0.0 |
| Beckhoff Automation | MDP for Beckhoff RT Linux(R) | 0.0.0 – < 0.0.5 | 0.0.5 |
Advisories 1
- VDE-2025-092 Beckhoff: Privilege escalation and information leak via Beckhoff Device Manager CERT@VDE · Jan 27, 2026