Skip to content
Sign in
7.3 High

CVE-2025-0497 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre

Description

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.

Affected products and versions

Product Affected versions Fixed in
FactoryTalk® AssetCentre Versions not published

Other CVEs of FactoryTalk® AssetCentre

The 3 CVEs of FactoryTalk® AssetCentre →
CVE-2025-0477 An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre 9.3 Critical CVE-2025-0498 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre 7.0 High
Track this CVE