CVE-2025-0497: Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

Published Jan 30, 2025
·
Updated

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.

Affected Software

2 affected components
Rockwell Automation FactoryTalk AssetCentre<V15.00.001
rockwellautomation Factorytalk Assetcentre<15.00.01

Remediation

Information

Corrected in: V11, V12, and V13 (patch available) V15.00.01 and later

Event History

Jan 30, 2025
CVE Published
via MITRE·05:40 PM
Data Sourced
via MITRE·05:40 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-0497?

CVE-2025-0497 has been classified as a data exposure vulnerability that poses significant security risks.

2

Which versions of Rockwell Automation FactoryTalk AssetCentre are affected by CVE-2025-0497?

CVE-2025-0497 affects all versions of Rockwell Automation FactoryTalk AssetCentre prior to V15.00.001.

3

How do I fix CVE-2025-0497?

To mitigate CVE-2025-0497, upgrade Rockwell Automation FactoryTalk AssetCentre to version V15.00.001 or later.

4

What kind of data is exposed due to CVE-2025-0497?

CVE-2025-0497 exposes sensitive credentials due to improper storage in configuration files.

5

Is there a workaround for CVE-2025-0497 until I can upgrade?

There are no official workarounds for CVE-2025-0497, so upgrading is the recommended course of action.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203