NCSC-2025-0345

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk

view advisory published 2025-10-31

Rockwell Automation heeft kwetsbaarheden verholpen in FactoryTalk View Machine Edition.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2025-9068UShigh7.8—
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with v…
CVE-2025-9067UShigh7.8—
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and…
CVE-2025-9066US——
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a…
CVE-2025-9064UScritical9.1—
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the p…
CVE-2025-9063UScritical9.8—
An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access t…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan