Description
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beckhoff Automation | Beckhoff.Device.Manager.XAR | 0.0.0 – < 2.5.3 | 2.5.3 |
| Beckhoff Automation | MDP software package for TwinCAT/BSD | 0.0.0 – < 1.7.0.0 | 1.7.0.0 |
| Beckhoff Automation | MDP for Beckhoff RT Linux(R) | 0.0.0 – < 0.0.5 | 0.0.5 |
Advisories 1
- VDE-2025-092 Beckhoff: Privilege escalation and information leak via Beckhoff Device Manager CERT@VDE · Jan 27, 2026