What’s Vulnerable › Vulnerabilities

CVE-2025-9064: Rockwell Automation FactoryTalk View Machine Edition Path Traversal

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-14 · updated 2026-10-08
• Weakness: CWE-287

Description

A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.

Affected products

• Rockwell Automation FactoryTalk View SE: through 15.0

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1753.html

Get alerted when CVE-2025-9064 or the next vulnerability affects your stack