CVE-2024-41176

7.3 highEPSS 0.3%

High (7.3) in beckhoff. EPSS 0.3% chance of exploitation in the next 30 days.

The MPD package included in TwinCAT/BSD allows an authenticated, low-privileged local attacker to induce a Denial-of-Service (DoS) condition on the daemon and execute code in the context of user “root” via a crafted HTTP request.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2024-08-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

beckhoff:mdp_package
beckhoff:twincat\/bsd

References

https://cert.vde.com/en/advisories/VDE-2024-050

Check your stack JSON