CNNVD-202601-4563 Information

CNNVD ID

CNNVD-202601-4563

CVE-2025-41727

  • CNNVD Published: 2026-01-27

Description (Chinese)

Beckhoff Automation Beckhoff.Device.Manager.XAR等都是美国Beckhoff Automation公司的产品。Beckhoff Automation Beckhoff.Device.Manager.XAR是一个用于远程管理和控制器配置的核心组件。Beckhoff Automation MDP software package for TwinCAT/BSD是一个硬件诊断和系统管理的核心组件。Beckhoff Automation mdp-bhf software package Beckhoff RT Linux是一个硬件信息软件包。 Beckhoff Automation多款产品存在安全漏洞,该漏洞源于身份验证绕过,可能导致执行特权操作和获得管理员访问权限。以下产品受到影响:Beckhoff Automation Beckhoff.Device.Manager.XAR、Beckhoff Automation MDP software package for TwinCAT/BSD和Beckhoff Automation mdp-bhf software package Beckhoff RT Linux。

Description (English)

Beckhoff Automation Beckhoff.Device.Manager.XAR and others are products of the United States company Beckhoff Automation. Beckhoff Automation Beckhoff.Device.Manager.XAR is a core component for remote management and controller configuration. Beckhoff Automation MDP software package for TwinCAT/BSD is a core component of hardware diagnostic and system management. Beckhoff Automation mdp-bhf software package Beckhoff RT Linux is a hardware information package. Beckhoff Automation has a security loophole, which stems from the circumvention of identification, which may lead to the execution of privileges and access to administrators. The following products were affected: Beckhoff Automation Beckhoff.Device.Manager.XAR, Beckhoff Automation MDP software package for TwinCAT/BSD and Beckhoff Automation mdp-bftware package Beckhoff RT Linux.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Beckhoff Automation

Published

2026-01-27

Last Modified

2026-02-24

References

https://certvde.com/de/advisories/VDE-2025-092 https://access.redhat.com/security/cve/cve-2025-41727

Patch

https://www.beckhoff.com/en-us/

Share on: