Rockwell Automation Factorytalk Viewpoint vulnerabilities

2 CVEs affecting Rockwell Automation Factorytalk Viewpoint, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9066, published 2025-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9066, published 2025-10-14. High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days. A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary…
CVE-2025-7973, published 2025-08-14. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which…