Skip to content
Sign in
8.5 High

CVE-2025-9068 A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair…

Description

A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.

Affected products and versions

Product Affected versions Fixed in
FactoryTalk Linx Versions not published

Other CVEs of FactoryTalk Linx

The 3 CVEs of FactoryTalk Linx →
CVE-2025-9067 A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx 8.5 High CVE-2023-29464 FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from… 8.2 High
Track this CVE