A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1753.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.7 · rockwellautomationNVD modified 2026-10-08 12:10
Affected (CPE criteria) 1
cpe:2.3:a:rockwellautomation:factorytalk_view:*:*:*:*:machine:*:*:*