CVE-2025-9066 — Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability

CVE-2025-9066

Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability PUBLISHED

Description (CNA)

A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / FactoryTalk ViewPoint	affected V14 and prior

CWE

CWE-20

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1752html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.