VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jan 30, 2025· Updated Jun 17, 2026

CVE-2025-0477

CVE-2025-0477

Description

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Rockwellautomation/Factorytalk Assetcentrecpe-rescue3 versions
    All prior to V15.00.001+ 2 more
    • (no CPE)range: All prior to V15.00.001
    • cpe:2.3:a:rockwellautomation:factorytalk_assetcentre:*:*:*:*:*:*:*:*range: <15.00.01
    • (no CPE)range: <V15.00.001

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.