CVE-2025-41727 | Beckhoff Automation Beckhoff.Device.Manager.XAR Device Manager User Interface unprotected alternate channel (VDE-2025-092)

A vulnerability identified as critical has been detected in Beckhoff Automation Beckhoff.Device.Manager.XAR, MDP software package for TwinCAT, BSD and MDP for Beckhoff RT Linux. This issue affects some unknown processing of the component Device Manager User Interface. The manipulation leads to unprotected alternate channel.

This vulnerability is referenced as CVE-2025-41727. The attack can only be performed from a local environment. No exploit is available.

You should upgrade the affected component.