{"id":"CVE-2025-24482","aliases":["EUVD-2025-3730","GHSA-wx72-xp52-v927"],"status":"published","title":"FactoryTalk® View Site Edition - Local Code Injection","description":"A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.","severity":{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00255,"percentile":0.17152,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2025-01-28T20:59:50Z","modified":"2026-06-17T08:59:05Z","products":[{"vendor":"rockwell automation","product":"factorytalk® view site edition"}],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1720.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24482"},{"url":"https://github.com/advisories/GHSA-wx72-xp52-v927"}],"sources":{"cve":[{"id":"CVE-2025-24482","title":"FactoryTalk® View Site Edition - Local Code Injection","description":"A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.","status":"published","published":"2025-01-28T20:59:50.868Z","modified":"2025-01-28T21:34:16.702Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:43.770144Z"}],"euvd":[{"id":"EUVD-2025-3730","description":"A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.","status":"published","published":"2025-01-28T20:59:50Z","modified":"2025-01-28T21:34:16Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-03T00:04:10.386162Z"}],"ghsa":[{"id":"GHSA-wx72-xp52-v927","title":"A Local Code Injection Vulnerability exists in the product and version listed above. The...","description":"A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.","status":"published","published":"2025-01-28T21:31:04Z","modified":"2025-01-28T21:31:15Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:59:42.234766Z"}],"nvd":[{"id":"CVE-2025-24482","description":"A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.","status":"published","published":"2025-01-28T21:15:18.687Z","modified":"2026-06-17T08:59:05.9Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:49.841519Z"}]}}