What's Happening?
Rockwell Automation has released several advisories detailing critical and high-severity vulnerabilities in its industrial products. The affected products include FactoryTalk, Micro800, and ControlLogix. A significant flaw in FactoryTalk Linx Network Browser, identified as CVE-2025-7972, allows attackers to disable FTSP token validation, potentially enabling unauthorized creation, updating, and deletion of FTLinx drivers. In the Micro800 series PLCs, three vulnerabilities related to the Azure RTOS open source real-time operating system were resolved, which could lead to remote code execution and privilege escalation. Additionally, a denial-of-service (DoS) vulnerability was addressed. ControlLogix products had a remote code execution vulnerability, CVE-2025-7353, patched. Other high-severity issues include DoS vulnerabilities in FLEX 5000, code execution in Studio 5000 Logix Designer, web server issues in ArmorBlock 5000, privilege escalation in FactoryTalk ViewPoint, and information exposure in FactoryTalk Action Manager. Rockwell Automation has confirmed that none of these vulnerabilities have been exploited in the wild.
AD
Why It's Important?
The resolution of these vulnerabilities is crucial for maintaining the security and integrity of industrial systems that rely on Rockwell Automation's products. These systems are integral to various sectors, including manufacturing and energy, where operational disruptions can have significant economic and safety implications. By addressing these vulnerabilities, Rockwell Automation helps prevent potential cyberattacks that could exploit these weaknesses, leading to unauthorized access, data breaches, or operational shutdowns. The advisories also highlight the importance of cybersecurity in industrial environments, where the impact of a security breach can extend beyond financial loss to include risks to human safety and environmental damage.
What's Next?
Organizations using Rockwell Automation products are advised to apply the patches and updates provided to mitigate the risks associated with these vulnerabilities. The Cybersecurity and Infrastructure Security Agency (CISA) has also issued advisories to inform organizations about these risks, emphasizing the need for vigilance and proactive security measures. As cybersecurity threats continue to evolve, companies in the industrial sector may need to invest in ongoing security assessments and updates to protect their systems from emerging threats.
