Skip to content
Sign in
7.0 High

CVE-2025-0498 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre

Description

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.

Affected products and versions

Product Affected versions Fixed in
FactoryTalk® AssetCentre Versions not published

Other CVEs of FactoryTalk® AssetCentre

The 3 CVEs of FactoryTalk® AssetCentre →
CVE-2025-0477 An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre 9.3 Critical CVE-2025-0497 A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre 7.3 High
Track this CVE