CVE-2025-9364

Katalog CVE

CVSS 8.8 · High EPSS 0,29%

Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada rockwellautomation factorytalk analytics logixai. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data.

Rincian

Terbit di NVD

9 September 2025

Terakhir diubah

1 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1748.html advisory vendor