CVE-2024-41176

High

Description

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.

SeverityHigh

CVSS7.3

Exploit probability—

ProductBeckhoff Mdp Package

PublishedAug 27, 2024

First seenAug 27, 2024

Weakness typeCWE-120CWE-120

How to fix

Update

beckhoff mdp_package1.2.7.0 or later
beckhoff twincat\/bsd14.1.2.0 or later

Vendor advisories

cert.vde.com/en/advisories/VDE-2024-050

Affected products

Product	Affected versions	Fixed in
beckhoff mdp_package	v < 1.2.7.0	1.2.7.0
beckhoff twincat\/bsd	v < 14.1.2.0	14.1.2.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.