Description
A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an elevated command prompt, enabling full privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® ViewPoint | Version 14.00 or below | — |
Advisories 2
- WID-SEC-2025-1849 Rockwell Automation FactoryTalk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 14, 2025
- ICSA-25-226-23 Rockwell Automation FactoryTalk Viewpoint CISA ICS & IT advisories · Aug 14, 2025