Home

Description

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.

PUBLISHED Reserved 2025-07-21 | Published 2025-08-14 | Updated 2025-08-14 | Assigner Rockwell




HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Problem types

CWE-286: Incorrect User Management

Product status

Default status
unaffected

All prior to 6.50
affected

References

www.rockwellautomation.com/...dvisories/advisory.SD1735.html

cve.org (CVE-2025-7972)

nvd.nist.gov (CVE-2025-7972)

Download JSON