FactoryTalk® AssetCentre vulnerabilities

3 known vulnerabilities in FactoryTalk® AssetCentre from Rockwell Automation. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FactoryTalk® AssetCentre: Insufficiently Protected Credentials

  CVE-2025-0498Jan 30, 2025Rockwell Automation

  A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token a

• 9.8 Critical severity

  FactoryTalk® AssetCentre: Insufficiently Protected Credentials

  CVE-2025-0497Jan 30, 2025Rockwell Automation

  A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp

• 9.8 Critical severity

  FactoryTalk® AssetCentre: Insufficiently Protected Credentials

  CVE-2025-0477Jan 30, 2025Rockwell Automation

  An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users o