CVE-2025-0477 Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

🗓️ 30 Jan 2025 17:49:03Reported by RockwellType

Encryption vulnerability in Rockwell Automation FactoryTalk® AssetCentre allows password extraction.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the FactoryTalk AssetCentre software, a centralized asset management system, is related to insufficiently secure data encryption. This allows attackers to disclose sensitive information that should be protected.	5 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages of the FactoryTalk AssetCentre software solution allows a perpetrator to disclose protected information.	5 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FactoryTalk AssetCentre software, a centralized asset management system, lies in the insufficient protection of registration data, which allows attackers to disclose sensitive information.	5 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-0477	30 Jan 202511:00	–	circl
CNNVD	Rockwell Automation FactoryTalk AssetCentre 安全漏洞	30 Jan 202500:00	–	cnnvd
CVE	CVE-2025-0477	30 Jan 202517:49	–	cve
EUVD	EUVD-2025-1701	3 Oct 202520:07	–	euvd
NVD	CVE-2025-0477	30 Jan 202518:15	–	nvd
Positive Technologies	PT-2025-3909 · Rockwell Automation · Factorytalk Assetcentre	14 Jan 202500:00	–	ptsecurity
Positive Technologies	PT-2025-3924 · Rockwell Automation · Factorytalk Assetcentre	15 Jan 202500:00	–	ptsecurity

[
  {
    "defaultStatus": "unaffected",
    "product": "FactoryTalk® AssetCentre",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "All prior to V15.00.001"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1721.html

30 Jan 2025 17:49Current

CVSS 49.3

EPSS0.01431

CWE-522