TwinCAT/BSD Vulnerable to Input Neutralization by Low-Privileged Attackers

CVE-2024-41174

What is CVE-2024-41174?

The IPC-Diagnostics package in TwinCAT/BSD developed by Beckhoff Automation is vulnerable to improper input neutralization, which can be exploited by low-privileged local attackers. This vulnerability may allow attackers to manipulate the system by injecting malicious inputs that are not properly sanitized, potentially leading to unauthorized actions or access within the affected system. Proper measures and mitigations are advised to protect systems that utilize this vulnerable package.

References