Description
An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® AssetCentre | All prior to V15.00.001 | — |
Advisories 2
- WID-SEC-2025-0229 Rockwell Automation FactoryTalk AssetCentre: Mehrere Schwachstellen ermöglichen Erlangen von Benutzerrechten BSI CERT-Bund (WID) · Jan 30, 2025
- ICSA-25-030-05 Rockwell Automation FactoryTalk AssetCentre CISA ICS & IT advisories · Jan 30, 2025