CYBERNEWSMEDIA Network:||
AD · 970×250

ICS/OT

Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products

Rockwell Automation has published several advisories describing critical and high-severity vulnerabilities affecting its products. The post Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products appeared first on SecurityWeek.

Rockwell Automation vulnerabilities

Rockwell Automation this week published several advisories describing critical- and high-severity vulnerabilities found recently in its products.

The industrial automation giant has informed customers about critical vulnerabilities in FactoryTalk, Micro800, and ControlLogix products.

In the FactoryTalk Linx Network Browser the vendor fixed CVE-2025-7972, a flaw that allows an attacker to disable FTSP token validation, which can be used to create, update, and delete FTLinx drivers.

In the case of Micro800 series PLCs, Rockwell resolved three older vulnerabilities affecting the Azure RTOS open source real-time operating system. The security holes can be exploited for remote code execution and privilege escalation. In addition to the Azure RTOS issues, the company has addressed a DoS vulnerability.

In ControlLogix products Rockwell patched a remote code execution vulnerability tracked as CVE-2025-7353. 

The list of high-severity flaws includes two DoS issues in FLEX 5000, a code execution vulnerability in Studio 5000 Logix Designer, web server issues in ArmorBlock 5000, a privilege escalation in FactoryTalk ViewPoint, and an information exposure issue in FactoryTalk Action Manager.

None of these vulnerabilities have been exploited in the wild, according to Rockwell Automation. 

The cybersecurity agency CISA has also published advisories for these vulnerabilities to inform organizations about the potential risks.

Learn More at SecurityWeek’s ICS Cybersecurity Conference
The leading global conference series for Operations, Control Systems and OT/IT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.
ICS Cybersecurity Conference
October 27-30, 2025 | Atlanta
www.icscybersecurityconference.com

Related: Rockwell Patches Critical, High-Severity Vulnerabilities in Several Products

Related: Rockwell PowerMonitor Vulnerabilities Allow Remote Hacking of Industrial Systems

Related: Siemens and Rockwell Tackle Industrial Cybersecurity, but Face Customer Hesitation

Related: Security Bypass Vulnerability Found in Rockwell Automation Logix Controllers

Latest News

CYBERNEWSMEDIAPublisher