Skip to content
OpenAdvisories
Critical ICSA-25-030-05 3 CVEs

Rockwell Automation FactoryTalk AssetCentre

Published Jan 30, 2025 · Updated Jan 30, 2025

Vendor: Rockwell Automation Product: FactoryTalk® AssetCentre

Summary

Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users.

Vulnerabilities 3

  • Critical 9.3
    CVE-2025-0477

    Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

    An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users …

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • High 7.3
    CVE-2025-0497

    Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

    A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanU…

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • High 7.0
    CVE-2025-0498

    Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

    A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token …

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT

Revision history

  1. #1

    Initial Publication

References