LiveThreat Vulnerability Brief — CVE-2025-60036
What It Is — Bosch Rexroth’s IndraWorks platform contains an XML deserialization flaw in the UA.TestClient component that permits arbitrary code execution when a crafted XML file is processed. The vulnerability scores 7.8 (CVSS v3.1) and is classified as high severity. Exploitability — No public exploit is known, but a proof‑of‑concept exists; exploitation requires a victim to open a malicious file or visit a malicious page (user interaction).
Affected Products — Vendor: Bosch Rexroth; Product: IndraWorks (industrial automation software).
TPRM Impact — IndraWorks is widely deployed in manufacturing, energy, and other critical‑infrastructure environments. A successful exploit could compromise downstream control systems, leading to production downtime, safety incidents, or data leakage, representing a significant supply‑chain risk for third‑party risk managers.
Recommended Actions — 1) Deploy Bosch Rexroth’s security update immediately. 2) Conduct an inventory of all IndraWorks installations and verify patch status. 3) Enforce strict file‑handling policies to block unauthenticated XML files. 4) Monitor endpoints for unexpected process launches linked to UA.TestClient. 5) Isolate critical control‑system networks to limit lateral movement. Source: Zero Day Initiative advisory