CVE-2023-6545: Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-14 · updated 2026-06-17
Weakness: CWE-601

Description

The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia.

Affected products

Beckhoff authelia-bhf of TwinCAT/BSD: before 4.37.5 — fixed in 4.37.5

How to fix

Upgrade to a fixed version: Beckhoff authelia-bhf of TwinCAT/BSD 4.37.5. Check the vendor advisory for mitigations.

References

https://cert.vde.com/en/advisories/VDE-2023-067/
https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2023-001.pdf
https://cert.vde.com/en/advisories/VDE-2023-067/
https://download.beckhoff.com/download/Document/product-security/Advisories/advisory-2023-001.pdf

Get alerted when CVE-2023-6545 or the next vulnerability affects your stack