CVE-2025-9063

CriticalCVSS 9.8

Published: 14/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

Summary

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs, and more.

Risk Assessment

An attacker could gain unauthorized access to critical information and the file system, potentially leading to further security breaches.

Recommendation

Apply the available security updates from the vendor (Rockwell Automation) for FactoryTalk View Machine Edition.

Other vulnerabilities in FactoryTalk View Machine Edition

CVE-2025-9064Critical
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panel's operating system. Exploitation depends on knowledge of the filenames to be deleted.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS