Rockwell Automation FactoryTalk Analytics PavilionX

Key Points:

• CVE-2025-14272 is a critical vulnerability in Rockwell Automation FactoryTalk Analytics PavilionX (<7.01) due to improper authorization enforcement in API endpoints, allowing unauthorized execution of privileged operations.
• The vulnerability could lead to significant impacts, including unauthorized user/role management and administrative actions within critical manufacturing environments globally.
• Recommended actions include minimizing network exposure for control systems, using secure remote access methods like VPNs, and implementing defensive measures as outlined by CISA.

Technical Details: CVE-2025-14272 has a CVSS score of 8.3 (High) and is characterized by improper authorization that can be exploited by attackers to gain elevated privileges.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned