Security Vulnerability in Rockwell Automation Driver Package MSI Repair Functionality

CVE-2025-9068

What is CVE-2025-9068?

A security issue in the repair functionality of the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) allows authenticated attackers with valid Windows user credentials to exploit the system. By initiating a repair process, an attacker can hijack the resulting console window for vbpinstall.exe. This vulnerability enables the execution of a command prompt with SYSTEM-level privileges, granting full access to all files, processes, and system resources, thereby posing a significant risk to the integrity and security of affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References