Vulnerabilities fixed in Rockwell Automation FactoryTalk

🗓️ 29 Jan 2025 10:32:40Reported by NCSCType

Rockwell Automation fixed FactoryTalk View Machine flaws enabling privilege escalation and code execution; production environment access required; updates released.

Reporter	Title	Published	Views	Family All 19
BDU FSTEC	The vulnerability of the software for creating and managing graphical user interfaces for Rockwell Automation FactoryTalk View Machine Edition industrial devices lies in the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows a perpetrator to execute arbitrary code.	3 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for creating and managing graphical user interfaces for Rockwell Automation FactoryTalk View Machine Edition (ME) devices lies in the lack of authentication procedures. This allows attackers to escalate their privileges and execute arbitrary code.	6 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-24479	28 Jan 202511:00	–	circl
Circl	CVE-2025-24480	28 Jan 202511:00	–	circl
CNNVD	Rockwell Automation FactoryTalk View ME 安全漏洞	28 Jan 202500:00	–	cnnvd
CNNVD	Rockwell Automation FactoryTalk View ME 安全漏洞	28 Jan 202500:00	–	cnnvd
CVE	CVE-2025-24479	28 Jan 202518:52	–	cve
CVE	CVE-2025-24480	28 Jan 202519:01	–	cve
Cvelist	CVE-2025-24479 FactoryTalk® View Machine Edition - Local Code Injection	28 Jan 202518:52	–	cvelist
Cvelist	CVE-2025-24480 FactoryTalk® View Machine Editon - Remote Code Execution	28 Jan 202519:01	–	cvelist