Rockwell Automation FactoryTalk DataMosaix Private Cloud
Advisory ansehen veröffentlicht 2026-01-13
Successful exploitation of this vulnerability could allow an attacker to perform unauthorized sensitive database operations.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-12807US | — | — | ||
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-26-013-02 JSONself
- ICSA Advisory ICSA-26-013-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationFactoryTalk DataMosaix Private Cloud
Rockwell Automation encourages users of the affected software to apply the following risk mitigations, if possible:
- BehobenFactoryTalk DataMosaix Private Cloud
Update FactoryTalk DataMosaix Private Cloud to Version 8.01.02 or later.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan