CVE-2025-60036

Name of the Vulnerable Software and Affected Versions Rexroth IndraWorks UA.Testclient versions prior to 15V24

Description A flaw exists in the UA.Testclient utility, included within Rexroth IndraWorks, allowing an attacker to execute arbitrary code on a user’s system. This is achieved by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file. This action causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE) and potentially a complete system compromise.

Recommendations Update Rexroth IndraWorks UA.Testclient to version 15V24 or later.