Rockwell Automation DataMosaix Private Cloud

Summary

Vulnerabilities 2

• High 7.0
  CVE-2025-0659

  Path Traversal and Rockwell Automation Third-party Vulnerability in DataMosaix™ Private Cloud

  A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in the body of the vulnerable endpoint, it is possible to overwrite files outside of the intended directory. A th…

  Rockwell Automation DataEdgePlatform DataMosaix™ Private Cloud ICS / OT
  Jan 28, 2025
• Unscored —
  CVE-2020-11656

  In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause th…

  sqlite3 ceph Debian Azure Linux
  Apr 9, 2020

Revision history

1. 2025-01-28 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-028-05 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-05
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B