CVE-2025-12768

HighCVSS 8.6

Published: 01/09/2026(UTC)Updated: 19/10/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

A security issue exists in FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.

Risk Assessment

Risk of remote takeover of an industrial device, potentially leading to production disruptions or data corruption.

Recommendation

Apply vendor-provided updates and restrict system access to trusted users only.

Other vulnerabilities in FactoryTalk Historian Machine Edition

CVE-2026-12661Medium
A denial-of-service vulnerability in FactoryTalk® Historian Machine Edition. An authenticated network-adjacent attacker can send crafted requests to the web interface, causing buffer overflow conditions that may crash the device and make it unresponsive.

Original NVD description (English source)

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS