Rockwell Automation Factorytalk® Viewpoint vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rockwell Automation Factorytalk® Viewpoint, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2025-9066rockwell automationfactorytalk® viewpoint
EPSS score
0.46%
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.8.5CVE-2025-7973rockwell automationfactorytalk® viewpoint
EPSS score
0.14%
A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an elevated command prompt, enabling full privilege escalation.