CVE-2025-9068
High
Description
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
SeverityHigh
CVSS7.8
Exploit probability—
ProductRockwellautomation Factorytalk Linx
PublishedOct 14, 2025
First seenOct 14, 2025
Weakness typeCWE-269Improper privilege management
How to fix
Update
- rockwellautomation factorytalk_linx6.50 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation factorytalk_linx | v < 6.50 | 6.50 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.