Vulnerability in Rockwell Automation Factorytalk® Datamosaix™ Private Cloud
CVE-2025-11084
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.
EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation Factorytalk® Datamosaix™ Private Cloud — versions 7.11, 8.00, 8.01