CVE-2025-9064 Rockwell Automation FactoryTalk View Machine Edition Path Traversal

What is CVE-2025-9064?

CVE-2025-9064 is a high-severity path traversal vulnerability in Rockwell Automation FactoryTalk View Machine Edition, published on 14 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the knowledge of filenames to be deleted.

Weakness: CWE-22, CWE-287

Which versions are affected by CVE-2025-9064?

It affects 1 product.

Products include Rockwellautomation Factorytalk View.

How do I fix CVE-2025-9064?

No fix has been published for CVE-2025-9064 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-9064 being exploited?

There is no known exploitation of CVE-2025-9064 in the wild and no public exploit code.

Other vulnerabilities in Rockwell Automation FactoryTalk View Machine Edition

• CVE-2023-2071 FactoryTalk View Machine Edition Vulnerable to Remote Code Execution Critical 9.8
• CVE-2024-45824 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation Critical 9.2
• CVE-2020-12029 Rockwell Automation FactoryTalk View SE Critical 9.0
• CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability High 8.8
• CVE-2024-7513 Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rp2m-9jh8-h55h.