Skip to content
OpenAdvisories
High ICSA-25-289-01 2 CVEs

Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7

Published Oct 16, 2025 · Updated Oct 16, 2025

Vendor: Rockwell Automation Product: FactoryTalk View Machine Edition Product: PanelView Plus 7

Summary

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to access to the device's file system.

Vulnerabilities 2

  • High 8.7
    CVE-2025-9064

    Rockwell Automation FactoryTalk View Machine Edition Path Traversal

    A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the …

    Rockwell Automation FactoryTalk View Machine Edition ICS / OT
  • High 7.0
    CVE-2025-9063

    Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass

    An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval …

    Rockwell Automation PanelView Plus 7 Performance Series B ICS / OT

Revision history

  1. #1

    Initial Publication

References