CVE-2024-41176

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.

Score

CVSS 3.1 7.3 High

Status

Modified - info@cert.vde.com

Published

2024-08-27

Last modified

2024-10-01

Weaknesses

CWE-120

Affected products

• Mdp Package (Beckhoff)
• Twincat/bsd (Beckhoff)
• Twincatbsd (Beckhoff)

References

• https://cert.vde.com/en/advisories/VDE-2024-050