LiveThreat Vulnerability Brief — CVE‑2025‑60035
What It Is — Bosch Rexroth’s IndraWorks OPC.TestClient component contains an unsafe XML deserialization routine that allows an attacker to execute arbitrary code on the host system. The flaw is rated CVSS 7.8 (High) and requires the victim to open a malicious file or visit a crafted web page. Exploitability — No public exploit has been observed, but a proof‑of‑concept exists and the vendor has released a patch.
Affected Products — Bosch Rexroth IndraWorks (industrial automation suite), specifically the OPC.TestClient module.
TPRM Impact — Organizations that embed IndraWorks in production lines, OEMs, or third‑party system integrators inherit a supply‑chain risk: a compromised client could be leveraged to pivot into plant networks, disrupt operations, or exfiltrate proprietary process data.
Recommended Actions —
- Verify version of IndraWorks in all environments; apply Bosch Rexroth’s security update immediately.
- Conduct an inventory of all third‑party systems that integrate OPC.TestClient and map their network exposure.
- Enforce strict file‑type controls and web‑filtering to block untrusted XML payloads.
- Update incident‑response playbooks to include detection of anomalous OPC traffic and suspicious process launches.
Source: Zero Day Initiative advisory