TwinCAT/BSD Vulnerability Allows DoS and Root Execution via Crafted HTTP Request

CVE-2024-41176

What is CVE-2024-41176?

The MPD package within TwinCAT/BSD presents a vulnerability that allows authenticated, low-privileged local attackers to exploit the system. By sending a specially crafted HTTP request, the attacker can disrupt the service provided by the daemon, leading to a Denial-of-Service (DoS) condition. Moreover, this exploit can enable the attacker to execute arbitrary code in the context of the user 'root', raising significant security concerns for affected systems.

References