Back to Database
Status published
High
CVE-2025-41727
Beckhoff: Performing privileged operations and gaining administrator access
Vulnerability Description
A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41727
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Diego Giubertoni from Nozomi Networks
More from Beckhoff Automation
View All →CVE-2025-41768
Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
Medium
5.5
CVE-2025-41728
Beckhoff: Information leak via Beckhoff Device Manager
Medium
5.3
CVE-2025-41726
Beckhoff: Arbitrary code execution within privileged processes
High
8.8
CVE-2021-34594
Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server
Medium
6.5
Affected Vendor
Beckhoff Automation
View all reports →Affected Software
Beckhoff.Device.Manager.XAR, MDP software package for TwinCAT/BSD, MDP for Beckhoff RT Linux(R)
Vulnerable Versions:
0.0.0
Timeline
Official Publish:
January 27th, 2026
Last Modified:
January 27th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.