What’s Vulnerable › Vulnerabilities

CVE-2025-9364: Rockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-10-01
• Weakness: CWE-497

Description

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data.

Affected products

• Rockwell Automation FactoryTalk® Analytics™ LogixAI®: 3.00.00, 3.01.00

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1748.html

Get alerted when CVE-2025-9364 or the next vulnerability affects your stack