Rockwell Automation FactoryTalk AssetCentre Data Exposure Vulnerability

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk AssetCentre. This vulnerability arises from the insecure storage of credentials in the configuration files of certain packages, which could allow unauthorized access to sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to stored credentials, allowing an attacker to impersonate users or access sensitive data.

Remediation

Users are advised to update FactoryTalk AssetCentre to V15.00.01 or later. For those on legacy versions, patches are available through the Rockwell Automation January 2025 Monthly Patch rollup or by following specific instructions for certain packages.