CVE-2025-12768 PUBLISHED

FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

Assigner: Rockwell
Reserved: 05.11.2025 Published: 01.09.2026 Updated: 01.09.2026

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.6

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Adjacent	Confidentiality	High	Confidentiality	None
Attack Complexity	Low	Integrity	High	Integrity	None
Attack Requirements	None	Availability	High	Availability	None
Privileges Required	Low
User Interaction	None

CVSS 4.0

Product Status

Vendor	Rockwell Automation
Product	FactoryTalk® Historian Machine Edition
Versions	Default: unaffected Version Series C: 7.101 Series B: 5.202 is affected

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1796.html

Problem Types

CWE-787 Out-of-bounds write CWE