Security Flaw in Microsoft Installer File of FTLinx by Rockwell Automation

CVE-2025-9067

What is CVE-2025-9067?

A vulnerability exists in the Microsoft Installer File (MSI) utilized by FTLinx, where authenticated attackers holding valid Windows credentials can exploit the system. By initiating a repair process, they can hijack the console window, subsequently launching a command prompt with SYSTEM-level access. This exploitation grants attackers full control over the system, enabling access to all files, processes, and system resources.

References