Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
CVE-2025-41701

7.8HIGH

Key Information:

Vendor: Beckhoff
Status: Te1000 | Twincat 3 Enineering
Vendor: CVE Published:; 9 September 2025

What is CVE-2025-41701?

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.

Affected Version(s)

TE1000 | TwinCAT 3 Enineering 0 < 3.1.4024.67

References

https://certvde.com/en/advisories/VDE-2025-075

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 9, 2025
Vulnerability Reserved
Apr 16, 2025

Credit

Peter Cheng

ELEX FEIGONG RESEARCH INSTITUTE of Elex CyberSecurity, Inc.