CVE-2025-0477 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak e…
Critical CVSS: 9.3

CVE-2025-0477

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.
Vendor
Rockwellautomation
Product
Factorytalk Assetcentre
CWE
CWE-522
Yayın Tarihi
2025-01-30 18:15:31
Güncelleme
2025-11-04 17:29:22
Source Identifier
PSIRT@rockwellautomation.com
KEV Date Added
-

Kategoriler

CWE-522 Factorytalk Assetcentre CRITICAL Rockwellautomation 2025

Referanslar

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1721.html