The vulnerability of the cscript.exe executable of Rockwell Automation’s HMI software FactoryTalk ViewPoint allows a malicious individual to gain elevated privileges.

The vulnerability of the cscript.exe executable file of Rockwell Automation’s HMI software, FactoryTalk ViewPoint, is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to gain increased privileges...

EUVD-2025-24817

Malicious code in bioql PyPI...

CVE-2025-7973

CVE-2025-7973 affects FactoryTalk ViewPoint 14.0 and earlier. The root cause is improper handling of MSI repair operations, allowing an attacker with local access to hijack the cscript.exe console window (which runs with SYSTEM privileges) and spawn an elevated command prompt, enabling full privi...

CVE-2025-7973 Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability

A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an elevated command prompt, enabling fu...