CVE-2025-7972 — Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability

CVE-2025-7972

Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass Vulnerability PUBLISHED

Description (CNA)

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / FactoryTalk® Linx	affected All prior to 6.50

CWE

CWE-286

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1735.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.