Rockwell Automation FactoryTalk Activation Manager
Advisory ansehen veröffentlicht 2025-09-09
Successful exploitation of this vulnerability could result in in data exposure, session hijacking, or full communication compromise.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-7970US | high7.5OT erhöht | — | ||
A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This co… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-252-05 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-252-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationFactoryTalk Activation Manager
If users are not able to upgrade to one of the corrected versions, Rockwell Automation recommends following their security best practices.
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight - BehobenFactoryTalk Activation Manager
Rockwell Automation recommends users update FactoryTalk Activation Manager software to Version 5.02 or later.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan