FactoryTalk ViewPoint vulnerabilities

2 known vulnerabilities in FactoryTalk ViewPoint from Rockwell Automation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated…

  CVE-2025-9066Oct 14, 2025Rockwell Automation

  A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.

• 8.5 High severity

  FactoryTalk® ViewPoint: Privilege Chaining

  CVE-2025-7973Aug 14, 2025Rockwell Automation

  A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an