Rockwell Automation FactoryTalk ViewPoint
view advisory published 2025-10-16
Successful exploitation of this vulnerability could allow unauthenticated attackers to achieve XML external entity injection, resulting in a temporary denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-9066US | — | — | ||
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-289-03 JSONself
- ICSA Advisory ICSA-25-289-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationPanelView Plus 7 Terminal
Rockwell Automation recommends that users upgrade to one of the following versions:
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan