Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-0477

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk® AssetCentre

Default version status: unaffected

  • All prior to V15.00.001affected

References