Skip to content
OpenAdvisories
High ICSA-25-226-30 1 CVE

Rockwell Automation FactoryTalk Action Manager

Published Aug 14, 2025 · Updated Aug 15, 2025 · Revision 2

Vendor: Rockwell Automation Product: FactoryTalk® Action Manager

Summary

Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device.

Vulnerabilities 1

  • High 8.5
    CVE-2025-9036

    Rockwell Automation FactoryTalk® Action Manager v1.0.0 Runtime Vulnerability

    A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.

    Rockwell Automation FactoryTalk® Action Manager ICS / OT

Revision history

  1. #2

    Revision - Update to CVE

  2. #1

    Initial Publication

References