Rockwell Automation FactoryTalk AssetCentre
Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-0498US | critical9.8 | — | ||
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of Factor… | ||||
| CVE-2025-0497US | critical9.8 | — | ||
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the… | ||||
| CVE-2025-0477US | critical9.8 | — | ||
An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodolog… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-030-05 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-030-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationFactoryTalk AssetCentre
Rockwell Automation recommends users follow the following mitigations:
- MitigationFactoryTalk AssetCentre
Rockwell Automation recommends users follow the following mitigations:
- MitigationFactoryTalk AssetCentre
Rockwell Automation recommends users follow the following mitigations:
- FixedFactoryTalk AssetCentre
For CVE-2025-0477: Update FactoryTalk AssetCentre to v15.00.01 or later. The encrypted data is stored in a table in the database. Control access to the database by non-essential users.
- FixedFactoryTalk AssetCentre
For CVE-2025-0497: Update FactoryTalk AssetCentre to v15.00.01 or later. Apply patches to correct legacy versions: To apply the patch for LogCleanUp or ArchiveLogCleanUp, download and install the Rockwell Automation January 2025 monthly patch rollup, or later. To apply patches for EventLogAttachmentExtractor or ArchiveExtractor, locate the article BF31148, download the patch files and follow the instructions. Restrict physical access to the machine to authorized users.
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1153042 - FixedFactoryTalk AssetCentre
For CVE-2025-0498: Update FactoryTalk AssetCentre to v15.00.01 or later. Apply patches to correct legacy versions: To apply the patch for download and install the Rockwell Automation January 2025 monthly patch rollup, or later. Restrict physical access to the machine to authorized users.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan