Rockwell Automation FactoryTalk DataMosaix Private Cloud
view advisory published 2026-01-13
Successful exploitation of this vulnerability could allow an attacker to perform unauthorized sensitive database operations.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-12807US | — | — | ||
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-013-02 JSONself
- ICSA Advisory ICSA-26-013-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationFactoryTalk DataMosaix Private Cloud
Rockwell Automation encourages users of the affected software to apply the following risk mitigations, if possible:
- FixedFactoryTalk DataMosaix Private Cloud
Update FactoryTalk DataMosaix Private Cloud to Version 8.01.02 or later.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan