Security Advisory

CVE-2025-0477

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-30 17:49:03
Last updated 2025-02-12 19:51:11
Assigner Rockwell
CVSS score 9.3
State PUBLISHED

Description

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.