Rockwell Automation FactoryTalk AssetCentre Data Exposure Vulnerability

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk AssetCentre. This vulnerability arises from the insecure storage of FactoryTalk Security user tokens, which could enable a threat actor to steal a token and impersonate another user.

Impact

Exploitation of this vulnerability could lead to unauthorized impersonation of users within the application, potentially allowing attackers to gain access to sensitive information or perform actions on behalf of the impersonated user.

Remediation

Users are advised to update FactoryTalk AssetCentre to V15.00.01 or later. For those using legacy versions, patches are available as part of the Rockwell Automation January 2025 Monthly Patch rollup. Additionally, restrict physical access to the machine to authorized users.