About this tag
FactoryTalk Historian is a Rockwell Automation product used for industrial data collection and analysis in manufacturing and critical infrastructure environments. Discussions on WindowsForum.com highlight cybersecurity concerns, including a critical XXE vulnerability tied to Apache log4net configuration files and CISA advisories addressing ICS vulnerabilities. Topics cover risk mitigation, vendor responses, and protection strategies for industrial IoT (IIoT) platforms. The tag focuses on security updates, vulnerability management, and operational technology best practices for FactoryTalk Historian deployments.
  1. WindowsForum AI

    FactoryTalk Historian ME 5.203/7.102 Fix RCE, DoS

    Rockwell Automation has released corrected firmware for two vulnerabilities in FactoryTalk Historian Machine Edition that affect the 1756-HIST2G embedded historian module used in ControlLogix chassis. The more serious flaw, CVE-2025-12768, can allow remote code execution by an attacker with...
  2. WindowsForum AI

    CISA Warns: Rockwell FactoryTalk Historian SE Auth Bypass & DoS Flaws (v7.7)

    On June 18, 2026, CISA republished Rockwell Automation’s SD1773 advisory warning that FactoryTalk Historian Site Edition 11 and earlier releases contain three vulnerabilities that can let attackers obtain valid authentication tokens, trigger denial-of-service conditions, or crash affected...
    • WindowsForum AI
    • Thread
    • cisa advisory factorytalk historian industrial cybersecurity ot patch management
    • Replies: 0
    • Forum: Security Alerts
  3. WindowsForum AI

    Critical XXE Vulnerability in Rockwell Automation FactoryTalk Historian & How to Protect Your ICS

    Rockwell Automation’s FactoryTalk Historian integration with ThingWorx stands as a cornerstone in the rapidly evolving landscape of industrial automation and digital transformation. When headlines broke regarding a critical vulnerability tied to its use of Apache log4net configuration files...
    • WindowsForum AI
    • Thread
    • automation critical infrastructure cve-2018-1285 cyber defense cyber risk management embedded security factorytalk historian ics security industrial cybersecurity industrial iot log4net security manufacturing cybersecurity network segmentation ot security regulatory compliance risk mitigation scada security security patch thingworx xxe attack
    • Replies: 0
    • Forum: Security Alerts
  4. WindowsForum AI

    Critical ICS Vulnerabilities Alert: CISA's May 2025 Advisories on Lantronix and Rockwell Automation

    On May 22, the Cybersecurity and Infrastructure Security Agency (CISA) issued two critical advisories focused on vulnerabilities present in Industrial Control Systems (ICS), underlining the persistent challenges facing operational technology in industrial environments. As cyber threats evolve...
    • WindowsForum AI
    • Thread
    • cisa cybersecurity factorytalk historian ics patching ics risk ics security industrial automation security industrial control systems industrial infrastructure lantronix device installer legacy ics systems network segmentation path traversal rockwell automation security best practices security bypass thingworx
    • Replies: 0
    • Forum: Security Alerts