CVE-2025-0659CWE-200

Path Traversal and Rockwell Automation Third-party Vulnerability in DataMosaix™ Private Cloud

High · published January 28, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

A path

traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character

sequence in the body of the vulnerable endpoint, it is possible to overwrite

files outside of the intended directory. A threat actor with admin privileges could

leverage this vulnerability to overwrite reports including user projects.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00390 · 31.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-01-28T15:16Z
EPSS history
Timeline
  • 28 JAN 15:16Z
    Path Traversal and Rockwell Automation Third-party Vulnerability in DataMosaix™ Private Cloud
    cvelistv5