Skip to content
Sign in
9.3 Critical

CVE-2025-0477 An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre

Description

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.

Affected products and versions

Product Affected versions Fixed in
FactoryTalk® AssetCentre Versions not published

Other CVEs of FactoryTalk® AssetCentre

The 3 CVEs of FactoryTalk® AssetCentre →
CVE-2025-0497 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre 7.3 High CVE-2025-0498 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre 7.0 High
Track this CVE