CVE-2025-0497

factorytalk_assetcentre vulnerability - rockwellautomation

Critical CVSS Score: 9.8 Published: 2025-01-30

Description

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.

Affected Systems

Vendor rockwellautomation
Product factorytalk_assetcentre
Affected Versions before 15.00.01
CWE ID CWE-522

Mitigation

Apply the latest security patches from the vendor, restrict network exposure where applicable, and monitor for exploitation attempts.

Fix Instructions

Refer to the vendor advisory and apply the latest security updates. See references for detailed patching instructions.

References

Risk Assessment

CVSS: 9.8/10

Exploit Available Unknown
Patch Available Yes

Need Help Patching?

Our security team can help assess and remediate this vulnerability in your environment.

Get Help

Related Vulnerabilities

critical

CVE-2025-0498

factorytalk_assetcentre...
critical

CVE-2025-0477

factorytalk_assetcentre...

Stay Ahead of Threats

Subscribe to our vulnerability feed and get instant alerts when new CVEs affect your systems.

Start Monitoring