CVE-2026-12661

MediumCVSS 4.8

Published: 01/09/2026(UTC)Updated: 01/09/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

A denial-of-service vulnerability in FactoryTalk® Historian Machine Edition. An authenticated network-adjacent attacker can send crafted requests to the web interface, causing buffer overflow conditions that may crash the device and make it unresponsive.

Risk Assessment

The attack can cause system unavailability, disrupting industrial processes and potentially requiring manual intervention.

Recommendation

Apply vendor-provided updates and restrict access to the web interface to trusted networks only.

Other vulnerabilities in FactoryTalk Historian Machine Edition

CVE-2025-12768High
A security issue exists in FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.

Original NVD description (English source)

A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS