Description
A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® Linx | All prior to 6.50 | — |
Advisories 2
- WID-SEC-2025-1849 Rockwell Automation FactoryTalk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 14, 2025
- ICSA-25-226-24 Rockwell FactoryTalk Linx CISA ICS & IT advisories · Aug 14, 2025