Description
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk View Machine Edition | V15.00 and prior | — |
Advisories 3
- NCSC-2025-0345 Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk NCSC-NL (Netherlands) · Oct 31, 2025
- ICSA-25-289-01 Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7 CISA ICS & IT advisories · Oct 16, 2025
- WID-SEC-2025-2273 Rockwell Automation FactoryTalk (View Point, View Machine, Linx): Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2025