Description
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® AssetCentre | All prior to V15.00.001 | — |
Advisories 2
- WID-SEC-2025-0229 Rockwell Automation FactoryTalk AssetCentre: Mehrere Schwachstellen ermöglichen Erlangen von Benutzerrechten BSI CERT-Bund (WID) · Jan 30, 2025
- ICSA-25-030-05 Rockwell Automation FactoryTalk AssetCentre CISA ICS & IT advisories · Jan 30, 2025