CVE-2025-60035: High severity Rexroth IndraWorks vulnerability
A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which then causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE). This can lead to a complete compromise of the system running the OPC.Testclient.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60035?
CVE-2025-60035 is considered a critical vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2025-60035?
To fix CVE-2025-60035, you should upgrade the OPC.Testclient utility in Rexroth IndraWorks to version 15V24 or later.
Which versions of Rexroth IndraWorks are affected by CVE-2025-60035?
All versions of Rexroth IndraWorks prior to version 15V24 are affected by CVE-2025-60035.
What type of attack is enabled by CVE-2025-60035?
CVE-2025-60035 enables an attacker to execute arbitrary code on the user's system through malicious serialized data.
Is there a workaround for CVE-2025-60035 if I cannot upgrade?
There are no specific workarounds for CVE-2025-60035; the only mitigation is to upgrade to the fixed version.