Beckhoff Automation vulnerabilities

5 vulnerabilities

Known vulnerabilities in Beckhoff Automation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.

Products

6
8.5CVE-2021-34594beckhoff automationtwincat opc ua server+2
EPSS score
1.13%
TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system.5.3CVE-2025-41728beckhoff automationbeckhoff.device.manager.xar+2
EPSS score
0.35%
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.5.5CVE-2025-41768beckhoff automationtf2000-hmi-server+1
EPSS score
0.25%
An high privileged remote attacker can inject arbitrary content into the custom CSS field on the affected devices due to improper neutralization of input during web page generation ('Cross-site Scripting').8.8CVE-2025-41726beckhoff automationbeckhoff.device.manager.xar+2
EPSS score
0.47%
A low privileged remote attacker can execute arbitrary code by sending specially crafted calls to the web service of the Device Manager or locally via an API and can cause integer overflows which then may lead to arbitrary code execution within privileged processes.7.8CVE-2025-41727beckhoff automationbeckhoff.device.manager.xar+2
EPSS score
0.18%
A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.