Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to access to the device's file system.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-9064US | critical9.1 | — | ||
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the p… | ||||
| CVE-2025-9063US | critical9.8 | — | ||
An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access t… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-289-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-289-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationFactoryTalk View Machine Edition
Rockwell Automation encourages users of the affected software to apply the following risk mitigations, if possible:
- MitigationPanelView Plus 7
Rockwell Automation encourages users of the affected software to apply the following risk mitigations, if possible:
- BehobenFactoryTalk View Machine Edition
For CVE-2025-9063 and CVE-2025-9064, update PanelView Plus 7 Performance Series B V14.103 firmware package.
https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&mode=3&refSoft=1&versions=61168 - BehobenPanelView Plus 7
For CVE-2025-9063 and CVE-2025-9064, update PanelView Plus 7 Performance Series B V14.103 firmware package.
https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&mode=3&refSoft=1&versions=61168
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan