What’s Vulnerable › Vulnerabilities
CVE-2025-24481: FactoryTalk® View Site Edition - Incorrect Permission Assignment
- Severity: high (CVSS 7.0 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-01-28 · updated 2026-06-17
- Weakness: CWE-732
Description
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.
Affected products
- Rockwell Automation FactoryTalk View SE: before V15
References
Get alerted when CVE-2025-24481 or the next vulnerability affects your stack