CVE-2025-60038

CVE-2025-60038 affects Rexroth IndraWorks. The vulnerability allows arbitrary code execution when deserializing a manipulated file containing malicious serialized data. Exploitation requires user interaction (opening a specially crafted file), enabling Remote Code Execution on the host applicatio...

CVE-2025-60035

The vulnerability CVE-2025-60035 affects the OPC.Testclient utility in Rexroth IndraWorks prior to version 15V24. It allows an attacker to achieve Remote Code Execution by parsing a specially crafted serialized file that is opened by a user; deserialization of malicious data leads to a complete c...

CVE-2025-60036

CVE-2025-60036 affects the UA.Testclient utility in Rexroth IndraWorks. All versions prior to 15V24 are vulnerable to Remote Code Execution via deserializing a manipulated file; exploitation requires user interaction (opening a crafted file). This can lead to complete host compromise. No remediat...

CVE-2025-60037

CVE-2025-60037 involves Rexroth IndraWorks where parsing a manipulated serialized file can cause arbitrary code execution on the host. The root cause is deserialization of untrusted data, triggered by opening a specially crafted file by a user. Impact is an overall system compromise with high con...