Rockwell Automation’s Vulnerability Rollercoaster: Patch Party or Panic?
Rockwell Automation has issued advisories on critical vulnerabilities in FactoryTalk, Micro800, and ControlLogix products, but don’t panic! No wild exploits yet. Meanwhile, hackers continue to practice their evil laughs as they read up on CVE-2025-7972 and others. Stay safe, and maybe unplug everything—just in case.
Hot Take:
Well, it looks like Rockwell Automation is giving out vulnerabilities like Oprah gives out cars! “You get a critical flaw, you get a critical flaw, everybody gets a critical flaw!” Maybe it’s time to consider a new hobby, like knitting or bird watching. At least those don’t come with security advisories.
Key Points:
- Rockwell Automation disclosed critical vulnerabilities in FactoryTalk, Micro800, and ControlLogix products.
- FactoryTalk Linx Network Browser had a critical flaw, CVE-2025-7972, allowing token validation bypass.
- Micro800 series PLCs had remote code execution and privilege escalation vulnerabilities.
- ControlLogix products had a remote code execution vulnerability, CVE-2025-7353.
- High-severity vulnerabilities include issues in FLEX 5000, Studio 5000 Logix Designer, and others.
Already a member? Log in here