CVE-2024-8934: Beckhoff: Local command injection via TwinCAT Package Manager
A local user with administrative access rights can enter specialy crafted values for settings at the user interface (UI) of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8934?
CVE-2024-8934 is considered a high severity vulnerability due to its potential for arbitrary OS command execution.
How do I fix CVE-2024-8934?
To fix CVE-2024-8934, ensure the TwinCAT Package Manager is updated to the latest version provided by Beckhoff.
Who is affected by CVE-2024-8934?
CVE-2024-8934 affects users with administrative access rights to the TwinCAT Package Manager.
What types of systems are vulnerable to CVE-2024-8934?
Systems using the Beckhoff TwinCAT Package Manager are vulnerable to CVE-2024-8934 if they allow special crafted user inputs.
What actions can be taken to mitigate CVE-2024-8934?
To mitigate CVE-2024-8934, restrict administrative access and monitor input values in the TwinCAT Package Manager's UI.