Rockwell Automation FactoryTalk Linx

Source: All CISA Advisories | Added:

Rockwell Automation's FactoryTalk Linx has critical vulnerabilities related to privilege chaining that allow authenticated attackers to gain SYSTEM-level access, potentially compromising all files and system resources. Two specific CVEs, CVE-2025-9067 and CVE-2025-9068, have been identified, both with a CVSS v4 score of 8.5.

Impact: Rockwell Automation FactoryTalk Linx: Versions 6.40 and prior

In the Wild: No

Age: Newly disclosed

Remediation: Install the Microsoft patch for the MSI issue and upgrade to version 6.50 or later.