Rockwell Automation FactoryTalk View Site Edition

Summary

Vulnerabilities 2

• High 7.0
  CVE-2025-24481

  FactoryTalk® View Site Edition - Incorrect Permission Assignment

  An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.

  Rockwell Automation FactoryTalk® View Site Edition ICS / OT
  Jan 28, 2025
• High 7.0
  CVE-2025-24482

  FactoryTalk® View Site Edition - Local Code Injection

  A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.

  Rockwell Automation FactoryTalk® View Site Edition ICS / OT
  Jan 28, 2025

Revision history

1. 2025-01-28 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-028-04 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-04
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014