Summary
Ein lokaler oder entfernter anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.
Product
FactoryTalk ist eine Software für die industrielle Automatisierung, die zur Maximierung der Effizienz und Steigerung der Anlagenproduktivität entwickelt wurde.
Vulnerabilities 5
-
High 8.7
Rockwell Automation FactoryTalk View Machine Edition Path Traversal
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the …
-
High 8.7
Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.
-
High 8.5
Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command pro…
-
High 8.5
Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting c…
-
High 7.0
Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass
An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval …
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-34183, EUVD-2025-34181, EUVD-2025-34186, EUVD-2025-34185, EUVD-2025-34184
-
#1
Initiale Fassung
References
-
Rockwell Security Advisory vom 2025-10-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1752.html
-
Rockwell Security Advisory vom 2025-10-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1753.html
-
Rockwell Security Advisory vom 2025-10-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1754.html