Approved changes feed: RSS · Atom

cpe:2.3:a:rockwell_automation:factorytalk®_assetcentre:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545)
ProductFactorytalk® Assetcentre (494e2b23-655d-5baf-bf89-abf41eeeacec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0498 vulnerable 2026-06-08 07:02:24.716359 Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.
Published: 2025-01-30T17:36:12.542Z
Updated: 2025-02-12T19:51:11.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0497 vulnerable 2026-06-08 07:02:24.715726 Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.
Published: 2025-01-30T17:40:51.775Z
Updated: 2025-02-12T19:51:11.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0477 vulnerable 2026-06-08 07:02:24.675993 Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.
Published: 2025-01-30T17:49:03.933Z
Updated: 2025-02-12T19:51:11.151Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.