Rockwell Automation Factorytalk View Machine Edition vulnerabilities

CVE-2025-9064 [CRITICAL] CWE-287 CVE-2025-9064: A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthentic A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.

CVE-2025-24480 [CRITICAL] CWE-78 CVE-2025-24480: A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerabil A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.

CVE-2024-37365 [HIGH] CWE-20 CVE-2024-37365: A remote code execution vulnerability exists in the affected product. The vulnerability allows users A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escalate their privileges by changing the macro to execute arbi

CVE-2025-24479 [HIGH] CWE-863 CVE-2025-24479: A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerabili A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user.