CVE-2025-9067

CVE-2025-9067 describes a privilege-escalation vulnerability in the x86 Microsoft Installer File (MSI) used with Rockwell Automation FactoryTalk Linx/FTLinx. Authenticated Windows users can initiate a repair via the MSI, hijack the repair console (e.g., vbpinstall.exe in the Rockwell MSI path), a...

CVE-2025-9067 Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities

A security issue exists within the x86 Microsoft Installer File MSI, installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges...

CVE-2025-9124

CVE-2025-9124 affects Rockwell Automation’s Compact GuardLogix 5370 controllers. The vulnerability stems from a fault when a crafted CIP unconnected explicit message is sent, leading to a denial-of-service and a major non-recoverable fault. According to the connected documents, the CVSS v4.0 base...

EUVD-2025-34183

A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File MSI repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This...

CVE-2025-9068 Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities

A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File MSI repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This...

CVE-2025-9063

CVE-2025-9063 concerns an authentication bypass in the FactoryTalk View Machine Edition Web Browser ActiveX control, enabling an unauthenticated attacker on the same network to gain access to the PanelView Plus 7 Series B file system, diagnostic information, and event logs. Connected sources conf...

CVE-2025-9066 Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability

A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service...

CVE-2025-9066

Summary: CVE-2025-9066 affects Rockwell Automation’s FactoryTalk ViewPoint. Unauthenticated attackers can abuse SOAP requests to trigger XML External Entity (XXE) processing, resulting in a temporary denial-of-service. The vulnerability is documented across multiple sources (NVD, Rockwell advisor...

CVE-2025-9437 Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on October 14, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-287-01 Rockwell Automation 1715 EtherNet/IP Comms Module CISA encourages users and...

Brute-Force Attack

ethycafides is vulnerable to brute-force attack. The vulnerability is due to the absence of specific anti-automation controls on the Admin UI login endpoint, which allows an attacker to perform credential testing attacks such as credential stuffing or password spraying to gain unauthorized access...

Rockwell Automation 1715 EtherNet/IP Comms Module

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause the web server to crash, requiring a restart to recover. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...

Rockwell Automation FactoryTalk Linx 安全漏洞

Rockwell Automation FactoryTalk Linx is a suite of industrial communication solutions from Rockwell Automation USA. The product is primarily used to communicate between small applications and large automation systems, among others. A security vulnerability exists in Rockwell Automation FactoryTal...

Rockwell Automation 1715-AENTR EtherNet/IP Adapter 安全漏洞

The Rockwell Automation 1715-AENTR EtherNet/IP Adapter is a redundant Ethernet adapter module from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation 1715-AENTR EtherNet/IP Adapter, which can be exploited by an attacker to cause a web server to crash...

Rockwell Automation ArmorStart AOP 安全漏洞

Rockwell Automation ArmorStart AOP is a distributed motor controller from Rockwell Automation. The Rockwell Automation ArmorStart AOP suffers from a denial of service vulnerability that originates from entering an invalid value into a COM method, which can be exploited by an attacker to cause a...

Rockwell Automation 1715-AENTR EtherNet/IP Adapter 安全漏洞

The Rockwell Automation 1715-AENTR EtherNet/IP Adapter is a redundant Ethernet adapter module from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation 1715-AENTR EtherNet/IP Adapter, which stems from improper handling of specially crafted payloads by CIP...

Rockwell Automation FactoryTalk View Machine Edition 安全漏洞

Rockwell Automation FactoryTalk View Machine Edition is a multifunctional HMI application from Rockwell Automation, Inc. A security vulnerability exists in Rockwell Automation FactoryTalk View Machine Edition that originates from an unauthenticated attacker being able to delete arbitrary files fr...

Rockwell Automation FactoryTalk Linx 安全漏洞

Rockwell Automation FactoryTalk Linx is a suite of industrial communication solutions from Rockwell Automation USA. The product is primarily used to communicate between small applications and large automation systems, among others. A security vulnerability exists in Rockwell Automation FactoryTal...

Rockwell Automation FactoryTalk ViewPoint 安全漏洞

Rockwell Automation FactoryTalk ViewPoint is a web-based client application from Rockwell Automation, Inc. A security vulnerability exists in Rockwell Automation FactoryTalk ViewPoint that originates from an unauthenticated attacker who can execute an XXE attack using a specially crafted SOAP...

PT-2025-42225

CVE-2025-56219 CVE-2025-56219 Lack of Rate Limiting – Add Package API Description An attacker can automate the creation of a large number of Packages in a short period of time to cause a DoS. CVSS Score https://t.co/iF3xHC0jbb...