CVE-2025-9364CWE-497

CVE-2025-9364

High · published September 9, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.3th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-09-09T17:15Z
Affected products (2)
ProductVersionsFixed in
rockwellautomation/factorytalk_analytics_logixaiall versions—
rockwellautomation/factorytalk_analytics_logixaiall versions—
References (1)
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1748.html · [email protected]
EPSS history
Timeline
  • 09 SEP 12:41Z
    Rockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB
    cvelistv5