CVE-2018-10619: Rockwellautomation Factorytalk Linx Gateway

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.

Affected products

• Rockwellautomation Factorytalk Linx Gateway: before 3.90.00 (fixed in 3.90.00)
• Rockwellautomation Rslinx Classic: before 3.90.01 (fixed in 3.90.01)

Published 2018-06-07. Last modified 2026-06-17.