Privilege Escalation Vulnerability in FactoryTalk ViewPoint by Rockwell Automation
CVE-2025-7973
8.5HIGH
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 14 August 2025
What is CVE-2025-7973?
A security issue in FactoryTalk ViewPoint versions up to 14.0 arises from improper handling of MSI repair processes. During such repairs, attackers can exploit this vulnerability to gain unauthorized control over the cscript.exe console window, which operates with SYSTEM-level privileges. This exploitation could lead to the creation of an elevated command prompt, allowing attackers to execute commands with full system privileges, posing a significant risk to affected systems.
Affected Version(s)
FactoryTalk® ViewPoint Version 14.00 or below