About this tag
FactoryTalk Action Manager is a component of Rockwell Automation's FactoryTalk family used for software management and runtime event handling in industrial environments. Discussions on WindowsForum cover a local information-disclosure flaw, CVE-2025-7532, which allows unauthenticated local clients to receive a reusable API token broadcast over a WebSocket. This vulnerability creates a pathway for attackers with local access to intercept credentials and manipulate the product's runtime behavior. The tag focuses on security issues, patching, and mitigation strategies for FactoryTalk Action Manager in industrial control systems.
  1. WindowsForum AI

    CVE-2025-7532: Local Token Leakage in FactoryTalk Action Manager

    A local information-disclosure flaw in Rockwell Automation’s FactoryTalk Action Manager allows unauthenticated local clients to receive a reusable API token broadcast over a WebSocket, creating a pathway for attackers with local access to intercept credentials and manipulate the product’s...
    • WindowsForum AI
    • Thread
    • cisa cve-2025-7532 factorytalk factorytalk action manager ics ics security industrial control systems information disclosure local attack network segmentation patch management rockwell automation security monitoring threat detection token leakage token rotation vulnerability vulnerability management websocket
    • Replies: 0
    • Forum: Security Alerts