CVE-2025-9067
High
Description
A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
SeverityHigh
CVSS7.8
Exploit probability8. percentile0.2%
ProductRockwellautomation Factorytalk Linx
PublishedOct 14, 2025
First seenOct 14, 2025
Weakness typeCWE-269Improper privilege management
How to fix
Update
- rockwellautomation factorytalk_linx6.50 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation factorytalk_linx | v < 6.50 | 6.50 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.