CVE-2025-60035Disclosure(bosch / rexroth_indraworks)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which then causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE). This can lead to a complete compromise of the system running the OPC.Testclient.

bosch CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://psirt.bosch.com/security-advisories/BOSCH-SA-591522.html

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

rexroth_indraworks

Threat summary

1 mentions across 1 observed day

What's happening

Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

bosch

Products

rexroth_indraworks

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2025-60035

Full discourse1 post

CVE@CVEnew232d
Disclosure
CVE-2025-60035 A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows… https://www.cve.org/CVERecord?id=CVE-2025-60035
Post summary
The post announces that CVE-2025-60035, a flaw in the OPC.Testclient utility of Rexroth IndraWorks affecting all versions before 15V24, has been identified, with a link to the official CVE record for further details.
00010117
56.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	bosch	rexroth_indraworks	-	-	-

Explore more

Back to dashboard bosch CVEs rexroth_indraworks vulnerabilities