VULNERABILITY INTELLIGENCE

CVE-2025-9064

CVSS score9.1 CRITICAL
EPSS probability0.61%
CISA KEVNot currently listed
Published2025-10-14
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.

Weakness classification

  • PSIRT@rockwellautomation.com: CWE-287
  • nvd@nist.gov: CWE-22

Primary references