CVE-2025-41728 | Beckhoff Automation Beckhoff.Device.Manager.XAR Device Manager Web Service out-of-bounds (VDE-2025-092)

A vulnerability was found in Beckhoff Automation Beckhoff.Device.Manager.XAR, MDP software package for TwinCAT, BSD and MDP for Beckhoff RT Linux. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Device Manager Web Service. This manipulation causes out-of-bounds read.

This vulnerability is handled as CVE-2025-41728. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.