Approved changes feed: RSS · Atom

cpe:2.3:a:rockwell_automation:factorytalk_linx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545)
ProductFactorytalk Linx (6c492e7c-40b9-509e-8c49-61ce399ad136)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9068 vulnerable 2026-06-08 07:45:21.653934 Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
Published: 2025-10-14T12:23:45.550Z
Updated: 2025-10-14T18:49:27.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9067 vulnerable 2026-06-08 07:45:21.653613 Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
Published: 2025-10-14T12:24:45.641Z
Updated: 2025-10-14T18:50:28.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29464 vulnerable 2026-06-08 06:02:40.293060 Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure
HIGH (8.2)
FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Sending a size larger than the buffer size results in leakage of data from memory resulting in an information disclosure. If the size is large enough, it causes communications over the common industrial protocol to become unresponsive to any type of packet, resulting in a denial-of-service to FactoryTalk Linx over the common industrial protocol.
Published: 2023-10-13T12:57:25.490Z
Updated: 2024-09-17T16:58:55.796Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.