CVE-2025-0498 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecu…
High CVSS: 7.0

CVE-2025-0498

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.
Vendor
Rockwellautomation
Product
Factorytalk Assetcentre
CWE
CWE-522
Yayın Tarihi
2025-01-30 18:15:33
Güncelleme
2025-11-04 17:20:55
Source Identifier
PSIRT@rockwellautomation.com
KEV Date Added
-

Kategoriler

CWE-522 Factorytalk Assetcentre HIGH Rockwellautomation 2025

Referanslar

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1721.html