What’s Vulnerable › Vulnerabilities

CVE-2025-9063: Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-14 · updated 2026-10-08
• Weakness: CWE-287

Description

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs, and more.

Affected products

• Rockwell Automation FactoryTalk View SE: through 15.0

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1753.html

Get alerted when CVE-2025-9063 or the next vulnerability affects your stack