CVE-2025-60035

Name of the Vulnerable Software and Affected Versions Rexroth IndraWorks OPC.Testclient versions prior to 15V24

Description A flaw exists in the OPC.Testclient utility, included within Rexroth IndraWorks, that allows an attacker to execute arbitrary code on a user’s system. This is achieved by parsing a manipulated file containing malicious serialized data. Successful exploitation requires user interaction, specifically opening a specially crafted file. This action causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE) and potentially leading to a complete system compromise.

Recommendations Update Rexroth IndraWorks OPC.Testclient to version 15V24 or later.