Rockwell Automation FactoryTalk ViewPoint

Source: All CISA Advisories | Added:

Rockwell Automation's FactoryTalk ViewPoint has a vulnerability that allows unauthenticated attackers to perform XML external entity injection, potentially causing a temporary denial-of-service. The issue affects certain versions of the PanelView Plus terminals and has been assigned CVE-2025-9066.

Impact: PanelView Plus 7 Terminal: Version 14 and prior

In the Wild: No

Age: Newly disclosed

Remediation: Upgrade to Panel View Plus 7 Standard and Performance Series A v12, v13, v14 patch AID BF30506 or Performance Series B V14.103; follow security best practices.

CVE Vulnerability Patch Update

Read Full Original Article →