CVE-2025-9036 — Rockwell Automation FactoryTalk® Action Manager v1.0.0 Runtime Vulnerability
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepte…
Published: 2025-08-14 · CVSS: 8.5 · CVSS 4.0
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7