CVE-2025-9068highCWE-269

CVE-2025-9068: falha de alta gravidade em Rockwell Automation FactoryTalk Linx

Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities

Publicada em

Seguir esta CVE+ Monitorar FactoryTalk Linx

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.2%
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Rockwell Automation · FactoryTalk Linx
CVEs relacionadas — Rockwell Automation FactoryTalk Linx

No mesmo produto, das mais perigosas para as menos.

CVE-2023-29464HIGHRockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information DisclosureEPSS 15.0%CVE-2025-9067HIGHRockwell Automation FactoryTalk® Linx Privilege Escalation VulnerabilitiesEPSS 0.2%