Description
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® Action Manager | Version 1.0.0 or below | — |
Advisories 2
- ICSA-25-226-30 Rockwell Automation FactoryTalk Action Manager CISA ICS & IT advisories · Aug 15, 2025
- WID-SEC-2025-1849 Rockwell Automation FactoryTalk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 14, 2025