CVE-2025-24481

FactoryTalk® View Site Edition - Incorrect Permission Assignment

CVSS 7 HIGHEPSS 0.2%CWE-732

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Affected products

Rockwell Automation · FactoryTalk® View Site Edition

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1720.html