by Kastro
Paper/Archive/CVE-2025-9064

CVE-2025-9064

Rockwell Automation FactoryTalk View Machine Edition — Rockwell Automation FactoryTalk View Machine Edition Path Traversal

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 49.0.490 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.

Affected

ProductAffectedFixed inSource
FactoryTalk View Machine EditionV15.00 and prior–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Rockwell (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refrockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1753.html