Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-7972

Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability

Description

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk® Linx

Default version status: unaffected

  • All prior to 6.50affected

References