Critical severity · published Jan 28, 2025
CVE-2025-24480
FactoryTalk® View Machine Editon - Remote Code Execution
9.3
CVSS
0.7%
EPSS
No
On KEV
Description
A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
FactoryTalk® View Machine Edition · Rockwell Automation
<V15 · source: vendor
Affected product
FV
FactoryTalk® View Machine Edition
Rockwell Automation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-24480
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-24480
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1719.html
More from FactoryTalk® View Machine Edition
9.1
CVE-2025-9064
Rockwell Automation FactoryTalk View Machine Edition Path Traversal
8.6
CVE-2025-24479
FactoryTalk® View Machine Edition - Local Code Injection
7.8
CVE-2024-37365
FactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path