CVE-2025-7973

A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an elevated command prompt, enabling full privilege escalation.

• CWE-268

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1738.html

Published

Aug 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7965The CBX Restaurant Booking WordPress plugin through 1.2.1 do…4.3
• CVE-2025-7966The Get Youtube Subs plugin for WordPress is vulnerable to S…6.4
• CVE-2025-7969Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2025-7970A security issue exists within FactoryTalk Activation Manage…7.5
• CVE-2025-7971A security issues exists within Studio 5000 Logix Designer d…7.3
• CVE-2025-7972A security issue exists within the FactoryTalk Linx Network …9.1
• CVE-2025-7974rocket.chat Incorrect Authorization Information Disclosure V…7.5
• CVE-2025-7975Anritsu ShockLine CHX File Parsing Directory Traversal Remot…7.8
• CVE-2025-7976Anritsu ShockLine CHX File Parsing Deserialization of Untrus…7.8
• CVE-2025-7977Ashlar-Vellum Cobalt LI File Parsing Out-Of-Bounds Read Remo…7.8
• CVE-2025-7978Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variab…7.8
• CVE-2025-7979Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer O…7.8