CVE-2025-9066 Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability
Unauthenticated attackers can exploit XXE in SOAP requests to cause temporary denial-of-service in FactoryTalk ViewPoint.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-9066?
CVE-2025-9066 is a high-severity vulnerability in Rockwell Automation FactoryTalk ViewPoint, published on 14 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.
Weakness: CWE-20
Which versions are affected by CVE-2025-9066?
How do I fix CVE-2025-9066?
No fix has been published for CVE-2025-9066 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-9066 being exploited?
There is no known exploitation of CVE-2025-9066 in the wild and no public exploit code.
Sources
Also known as GHSA-cv32-hwmf-7rq4.