Rockwell Automation Factorytalk Linx vulnerabilities

4 vulnerabilities

Known vulnerabilities in Rockwell Automation Factorytalk Linx, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.5CVE-2025-9068rockwell automationfactorytalk linx+1
EPSS score
0.18%
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.8.5CVE-2025-9067rockwell automationfactorytalk linx+1
EPSS score
0.18%
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.9.1CVE-2025-7972rockwell automationfactorytalk linx+1
EPSS score
0.50%
A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.9.1CVE-2023-29464rockwell automationfactorytalk linx+1
EPSS score
14.97%
FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Sending a size larger than the buffer size results in leakage of data from memory resulting in an information disclosure. If the size is large enough, it causes communications over the common industrial protocol to become unresponsive to any type of packet, resulting in a denial-of-service to FactoryTalk Linx over the common industrial protocol.