Description
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk ViewPoint | V14 and prior | — |
Advisories 3
- NCSC-2025-0345 Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk NCSC-NL (Netherlands) · Oct 31, 2025
- ICSA-25-289-03 Rockwell Automation FactoryTalk ViewPoint CISA ICS & IT advisories · Oct 16, 2025
- WID-SEC-2025-2273 Rockwell Automation FactoryTalk (View Point, View Machine, Linx): Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2025