Remote Code Execution Vulnerability in Rexroth IndraWorks UA.Testclient Utility

CVE-2025-60036

What is CVE-2025-60036?

A security flaw in the UA.Testclient utility, part of Rexroth IndraWorks, allows attackers to execute arbitrary code on affected systems. By exploiting this vulnerability, which requires user interaction to open a crafted file containing malicious serialized data, attackers can trigger the deserialization of this data, leading to the potential takeover of the host system. This issue affects all versions prior to 15V24, underscoring the critical need for users to update their software to mitigate risks associated with unauthorized system access.

References