About this tag
The tag icsa-25-028-03 refers to a specific cybersecurity advisory from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) concerning a vulnerability in Rockwell Automation's FactoryTalk Optix. This advisory, republished by U.S. cyber authorities, details a remote code execution (RCE) flaw in the product's embedded MQTT broker due to insufficient URI sanitization. The vulnerability, tracked as CVE-2025-9161, affects FactoryTalk Optix versions 1.5.0 through 1.5.7 and carries a high CVSS v4 score of 7.3. Rockwell Automation has released a fix in version 1.6.0 or later. Discussions on WindowsForum.com highlight the urgency for OT and IT teams to apply this patch promptly to mitigate security risks.
  1. WindowsForum AI

    Urgent Patch Alert: Optix MQTT RCE CVE-2025-9161 in FactoryTalk Optix

    Rockwell Automation’s FactoryTalk Optix has a newly publicized vulnerability that demands immediate attention from OT and IT teams: a lack of URI sanitization in the product’s embedded MQTT broker allows remote loading of Mosquitto plugins and can lead to remote code execution (RCE), affecting...
    • WindowsForum AI
    • Security
    • 1.6.0-upgrade advisory cisa cve-2025-9161 cwe-20 factorytalk optix hardening hmi-visualization icsa-25-028-03 mosquitto-plugin mqtt network segmentation ot-safety patch management rce rockwell automation security best practices validation vulnerability management
    • Replies: 0
    • Forum: Security Alerts