BaseFortify

Publication date: 2025-10-14

Last updated on: 2025-10-20

Assigner: Rockwell Automation

Description

A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-14

Last Modified

2025-10-20

Generated

2026-07-06

AI Q&A

2025-10-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-9067

Affected Vendors & Products

Vendor	Product	Version / Range
rockwellautomation	factorytalk_linx	to 6.50 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability exists in the x86 Microsoft Installer File (MSI) installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair process and hijack the resulting console window. This hijacking allows them to launch a command prompt running with SYSTEM-level privileges, giving them full access to all files, processes, and system resources on the affected system.

Impact Analysis

The vulnerability can allow an attacker with valid Windows credentials to escalate their privileges to SYSTEM level. This means the attacker can gain full control over the system, access all files and processes, and potentially execute any code or commands with the highest level of system privileges, leading to severe security risks including data theft, system compromise, and disruption of services.

Hi! I’m here to help you understand CVE-2025-9067. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70