High severity · published Jan 28, 2025
CVE-2025-24481
FactoryTalk® View Site Edition - Incorrect Permission Assignment
7.0
CVSS
0.2%
EPSS
No
On KEV
Description
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
FactoryTalk® View Site Edition · Rockwell Automation
<V15 · source: vendor
Affected product
FV
FactoryTalk® View Site Edition
Rockwell Automation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-24481
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-24481
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1720.html
More from FactoryTalk® View Site Edition
9.8
CVE-2024-45824
FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation
8.8
CVE-2024-7513
Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions
7.5
CVE-2023-46289
Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
7.0
CVE-2025-24482
FactoryTalk® View Site Edition - Local Code Injection