CVE-2025-24480: FactoryTalk® View Machine Editon - Remote Code Execution

Published Jan 28, 2025

Updated

A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.

Affected Software

1 affected component

Rockwell Automation FactoryTalk View Machine Edition

Remediation

Information

Upgrade to V15.00 or apply patch in AID 1152571

Event History

Jan 28, 2025

CVE Published

via MITRE·07:01 PM

Data Sourced

via MITRE·07:01 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-24480?

CVE-2025-24480 is classified as a Remote Code Execution vulnerability with a high severity rating due to its potential impact.

How do I fix CVE-2025-24480?

To fix CVE-2025-24480, ensure that input sanitation is properly implemented and apply any available patches from Rockwell Automation.

What products are affected by CVE-2025-24480?

CVE-2025-24480 affects Rockwell Automation's FactoryTalk View Machine Edition software.

Can CVE-2025-24480 be exploited remotely?

Yes, CVE-2025-24480 can be exploited remotely by attackers due to inadequate input sanitation.

What potential consequences does CVE-2025-24480 have if exploited?

Exploiting CVE-2025-24480 can allow a remote attacker to execute commands or code with high privileges on the affected system.