RCE in Rockwell Automation Factorytalk® View Machine Edition

CVE-2025-24480

A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.007 (50.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References