Description
A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.
Published: 2026-11-11
Score: 8.5 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 11 Nov 2026 08:30:00 +0000

Type Values Removed Values Added
Description A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.
Title Insufficient IOCTL access control allows local access to I/O ports
First Time appeared Beckhoff
Beckhoff tcrouter.sys
Beckhoff twincat.xar.base.km
Weaknesses CWE-782
CPEs cpe:2.3:a:beckhoff:tcrouter.sys:*:*:*:*:*:Windows:x64:*
cpe:2.3:a:beckhoff:tcrouter.sys:*:*:*:*:*:Windows:x86:*
cpe:2.3:a:beckhoff:tcrouter.sys:3.1.0.2364:*:*:*:*:Windows:x64:*
cpe:2.3:a:beckhoff:tcrouter.sys:3.1.0.2364:*:*:*:*:Windows:x86:*
cpe:2.3:a:beckhoff:twincat.xar.base.km:3.16.29:tcpkg:*:*:*:Windows:*:*
cpe:2.3:a:beckhoff:twincat.xar.base.km:tcpkg:*:*:*:*:Windows:*:*
Vendors & Products Beckhoff
Beckhoff tcrouter.sys
Beckhoff twincat.xar.base.km
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Beckhoff Tcrouter.sys Twincat.xar.base.km
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-11-11T08:19:35.444Z

Reserved: 2026-08-04T07:16:35.058Z

Link: CVE-2026-18767

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-11T09:17:15.133

Modified: 2026-11-11T09:17:15.133

Link: CVE-2026-18767

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-782

    Exposed IOCTL with Insufficient Access Control