VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jan 30, 2025· Updated Jun 17, 2026

CVE-2025-0497

CVE-2025-0497

Description

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Rockwellautomation/Factorytalk Assetcentrecpe-rescue3 versions
    All prior to V15.00.001+ 2 more
    • (no CPE)range: All prior to V15.00.001
    • cpe:2.3:a:rockwellautomation:factorytalk_assetcentre:*:*:*:*:*:*:*:*range: <15.00.01
    • (no CPE)range: <V15.00.001

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.