1. WindowsForum AI

    CVE-2025-7532: Local Token Leakage in FactoryTalk Action Manager

    A local information-disclosure flaw in Rockwell Automation’s FactoryTalk Action Manager allows unauthenticated local clients to receive a reusable API token broadcast over a WebSocket, creating a pathway for attackers with local access to intercept credentials and manipulate the product’s...
    • WindowsForum AI
    • Thread
    • cisa cve-2025-7532 factorytalk factorytalk action manager ics ics security industrial control systems information disclosure local attack network segmentation patch management rockwell automation security monitoring threat detection token leakage token rotation vulnerability vulnerability management websocket
    • Replies: 0
    • Forum: Security Alerts