CVE-2025-7973: Privilege Chaining

A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an elevated command prompt, enabling fu...

Rockwell Automation FactoryTalk Viewpoint Security Vulnerabilities

Rockwell Automation FactoryTalk Viewpoint is a browser plug-in from Rockwell Automation, Inc. A security vulnerability exists in Rockwell Automation FactoryTalk Viewpoint version 14.0 and prior versions, which stems from a mishandled MSI fix operation that could result in elevated privileges...