Data Exposure Vulnerability in Rockwell Automation FactoryTalk® AssetCentre
CVE-2025-0497

7.3HIGH

Key Information:

Vendor

Rockwell Automation
Status
Factorytalk® Assetcentre
Vendor
CVE Published:
30 January 2025

What is CVE-2025-0497?

A vulnerability exists in previous versions of Rockwell Automation's FactoryTalk® AssetCentre, where sensitive credentials are improperly stored in the configuration files of various packages, including EventLogAttachmentExtractor and ArchiveExtractor. This could potentially allow unauthorized access to critical information, compromising the integrity and confidentiality of sensitive data.

Affected Version(s)

FactoryTalk® AssetCentre All prior to V15.00.001

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.