Description
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® AssetCentre | All prior to V15.00.001 | — |
Advisories 2
- WID-SEC-2025-0229 Rockwell Automation FactoryTalk AssetCentre: Mehrere Schwachstellen ermöglichen Erlangen von Benutzerrechten BSI CERT-Bund (WID) · Jan 30, 2025
- ICSA-25-030-05 Rockwell Automation FactoryTalk AssetCentre CISA ICS & IT advisories · Jan 30, 2025