Skip to content
OpenAdvisories
Critical ICSA-25-028-03 2 CVEs

Rockwell Automation FactoryTalk

Published Jan 28, 2025 · Updated Jan 28, 2025

Vendor: Rockwell Automation Product: FactoryTalk® View ME

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges.

Vulnerabilities 2

  • Critical 9.3
    CVE-2025-24480

    FactoryTalk® View Machine Editon - Remote Code Execution

    A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.

    Rockwell Automation FactoryTalk View Machine Edition ICS / OT
  • High 8.6
    CVE-2025-24479

    FactoryTalk® View Machine Edition - Local Code Injection

    A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user.

    Rockwell Automation FactoryTalk View Machine Edition ICS / OT

Revision history

  1. #1

    Initial Publication

References