CVE-2025-9067highCWE-269

CVE-2025-9067: falha de alta gravidade em Rockwell Automation FactoryTalk Linx

Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities

Publicada em

Seguir esta CVE+ Monitorar FactoryTalk Linx

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.2%
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Rockwell Automation · FactoryTalk Linx
CVEs relacionadas — Rockwell Automation FactoryTalk Linx

No mesmo produto, das mais perigosas para as menos.

CVE-2023-29464HIGHRockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information DisclosureEPSS 15.0%CVE-2025-9068HIGHRockwell Automation FactoryTalk® Linx Privilege Escalation VulnerabilitiesEPSS 0.2%