High severity · published Jan 28, 2025
CVE-2025-24479
FactoryTalk® View Machine Edition - Local Code Injection
8.6
CVSS
0.2%
EPSS
No
On KEV
Description
A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
FactoryTalk View Machine Edition · Rockwell Automation
<V15 · source: vendor
Affected product
FV
FactoryTalk View Machine Edition
Rockwell Automation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-24479
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-24479
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1719.html
More from FactoryTalk View Machine Edition
9.3
CVE-2025-24480
FactoryTalk® View Machine Editon - Remote Code Execution
9.1
CVE-2025-9064
Rockwell Automation FactoryTalk View Machine Edition Path Traversal
7.8
CVE-2024-37365
FactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path