CVE-2025-41728 — Beckhoff: Information leak via Beckhoff Device Manager
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manage…
Published: 2026-01-27 · CVSS: 5.3 · CVSS 3.1
A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially copy confidential information into a response.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7