LiveThreat Vulnerability Brief — CVE‑2025‑60037 / CVE‑2025‑60038
What It Is — Bosch Rexroth’s IndraWorks engineering suite contains a deserialization flaw in its Print Settings file parser. Crafted files can trigger arbitrary code execution in the context of the current user. Exploitability — No public exploit code has been released, but the vulnerability is exploitable via a malicious file or web page that forces a user to open the file; CVSS 7.8 (High) reflects the severe impact and low attack complexity.
Affected Products — Bosch Rexroth IndraWorks (all versions prior to the February 2026 security update).
TPRM Impact — IndraWorks is widely deployed in industrial automation, OEMs, and system integrators. A successful exploit could compromise manufacturing control systems, inject malicious code into downstream products, and create a supply‑chain foothold for threat actors targeting downstream customers.
Recommended Actions — 1️⃣ Deploy Bosch Rexroth’s February 2026 patch immediately. 2️⃣ Inventory all IndraWorks installations and verify version compliance. 3️⃣ Enforce strict file‑type controls and sandbox opening of engineering files. 4️⃣ Monitor endpoint logs for unexpected process launches originating from the IndraWorks executable. 5️⃣ Incorporate the patch status into third‑party risk assessments and vendor questionnaires. Source: Zero Day Initiative advisory