What’s Vulnerable › Vulnerabilities

CVE-2025-7970: Rockwell Automation FactoryTalk Activation Manager Lack of Encryption Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-06-17
• Weakness: CWE-306

Description

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise.

Affected products

• Rockwell Automation FactoryTalk® Activation Manager: from 5.00.00 through 5.01.01

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1741.html

Get alerted when CVE-2025-7970 or the next vulnerability affects your stack