VULNERABILITY INTELLIGENCE

CVE-2025-0477

CVSS score9.8 CRITICAL

EPSS probability0.37%

CISA KEVNot currently listed

Published2025-01-30

Last modified2026-06-17

Description

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.