ICSA-25-226-30
·
Published 2025-08-15
·
View on CISA ICS-CERT ↗
Rockwell Automation FactoryTalk Action Manager
CVSS 7.8
HIGH
Risk Summary
Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device.
CVEs (1)
Remediations
- Rockwell Automation recommends users to update to version 1.01 or later if possible. If users using the affected software are not able to upgrade the version, security best practices should be applied.
Affected Vendors
Rockwell Automation
Affected Products (1)
Rockwell Automation
·
FactoryTalk Action Manager
>=1.0.0|<1.01
Affected Sectors
Chemical, Critical Manufacturing, Energy, Food and Agriculture, Transportation Systems, Water and Wastewater
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more