CVE-2025-9160 | THREATINT

Description

A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution.

PUBLISHED Reserved 2025-08-19 | Published 2025-09-09 | Updated 2025-09-09 | Assigner Rockwell

HIGH: 7.0CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-306: Missing Authentication for Critical Function

Product status

Default status

unaffected

Version 32 - 37.011 w Windows package (2.1.0) Win10 v1607

affected

References

www.rockwellautomation.com/...dvisories/advisory.SD1746.html

cve.org (CVE-2025-9160)

nvd.nist.gov (CVE-2025-9160)

Download JSON