CVE-2025-7970
Last modified
CVE-2025-7970 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Factorytalk Activation Manager | >= 5.00.00, <= 5.01.01 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-7970?
How severe is CVE-2025-7970?
How do I fix CVE-2025-7970?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-7961Improper Control of Generation of Code ('Code Injection') vu…6.9
- CVE-2025-7962In Jakarta Mail versions prior to 2.0.2 it is possible to pe…7.5
- CVE-2025-7964After receiving a malformed 802.15.4 MAC Data Request th…9.2
- CVE-2025-7965The CBX Restaurant Booking WordPress plugin through 1.2.1 do…4.3
- CVE-2025-7966The Get Youtube Subs plugin for WordPress is vulnerable to S…6.4
- CVE-2025-7969Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2025-7971A security issues exists within Studio 5000 Logix Designer d…7.3
- CVE-2025-7972A security issue exists within the FactoryTalk Linx Network …9.1
- CVE-2025-7973A security issue exists in FactoryTalk ViewPoint version 14.…8.5
- CVE-2025-7974rocket.chat Incorrect Authorization Information Disclosure V…7.5
- CVE-2025-7975Anritsu ShockLine CHX File Parsing Directory Traversal Remot…7.8
- CVE-2025-7976Anritsu ShockLine CHX File Parsing Deserialization of Untrus…7.8
Are you affected by CVE-2025-7970?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST