Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-0497

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk® AssetCentre

Default version status: unaffected

  • All prior to V15.00.001affected

References