CVE-2025-24481: FactoryTalk® View Site Edition - Incorrect Permission Assignment
First published: Tue Jan 28 2025(Updated: )
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.
Credit: PSIRT@rockwellautomation.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FactoryTalk View |
Remedy
Upgrade to V15 or apply patch, answer ID 1152306.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-24481?
CVE-2025-24481 is classified as a high-severity vulnerability due to its potential for unauthenticated access to system configurations.
How do I fix CVE-2025-24481?
To fix CVE-2025-24481, ensure that appropriate permissions are assigned to the remote debugger port to restrict unauthorized access.
What vulnerabilities are associated with CVE-2025-24481?
CVE-2025-24481 is specifically related to incorrect permission assignments within Rockwell Automation FactoryTalk View Site Edition.
Who is affected by CVE-2025-24481?
Users of Rockwell Automation FactoryTalk View Site Edition are affected by CVE-2025-24481 due to the vulnerability in the remote debugger port.
Can CVE-2025-24481 lead to a data breach?
Yes, CVE-2025-24481 can potentially lead to a data breach by allowing unauthorized users to access sensitive system configurations.
- agent/references
- agent/weakness
- agent/remedy
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/epss
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/epss-latest
- source/FIRST
- vendor/rockwell automation
- canonical/factorytalk view