A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
6.50 and later
Workaround
No workaround given by the vendor.
References
History
Tue, 14 Oct 2025 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources. | |
| Title | Rockwell Automation FactoryTalk® Linx Privilege Escalation Vulnerabilities | |
| Weaknesses | CWE-269 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: Rockwell
Published:
Updated: 2025-10-14T18:49:27.564Z
Reserved: 2025-08-15T14:20:47.449Z
Link: CVE-2025-9068
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-10-14T13:15:40.093
Modified: 2025-10-14T19:36:29.240
Link: CVE-2025-9068
Redhat
No data.
OpenCVE Enrichment
No data.