CVE-2025-0477

The vulnerability (CWE-522 — Insufficiently Protected Credentials) results from the use of a weak encryption algorithm or mechanism for storing user application passwords. An attacker who gains access to encrypted authentication data can – due to the weakness of the applied method – reverse or break the encryption and recover passwords in plain text. This process does not require authentication or user interaction, making the attack possible to conduct remotely.

An attacker can extract passwords of other users of the FactoryTalk® AssetCentre application, which may lead to unauthorized access to the industrial asset management system and potential compromise of confidentiality, integrity, and availability of data in the OT environment.

Update Rockwell Automation FactoryTalk® AssetCentre software to version V15.00.001 or later. Detailed information is available in the manufacturer's security bulletin at: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1721.html

All versions of Rockwell Automation FactoryTalk® AssetCentre prior to V15.00.001