CVE-2025-7972

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - PSIRT@rockwellautomation.com

Published

2025-08-14

Last modified

2025-08-14

Weaknesses

CWE-286

Affected products

• Factorytalk Linx (Rockwell Automation)
• Factorytalk Linx (Rockwellautomation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1735.html