Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File (MSI) repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH: CVE-2025-9068 (CVSS 7.8) Rockwell Automation Driver Package x64 MSI repair function allows privilege escalation to SYSTEM. Authenticated attackers can hijack vbpinstall.exe console for full system access. Affects: FTLinx installations #CVE #PatchNow #ThreatIntel https://t.co/bskkDnLyBD
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | rockwellautomation | factorytalk_linx | - | - | - |