Rockwell Automation Historian ME: 2 CVEs, High 8.0
Summary
CISA reports 2 vulnerabilities in Rockwell Automation Series B, Series C. Weakness types: Out-of-bounds Write, Stack-based Buffer Overflow. Successful exploitation of these vulnerabilities could crash the device being accessed; an out-of-bounds write condition may allow remote code execution. Highest CVSS v3 score: 8.0 (High), exploitable from an adjacent network.
At a glance
- Vendor
- Rockwell Automation
- Products
- Series B, Series C
- CVEs
- CVE-2025-12768, CVE-2026-12661
- Highest CVSS v3
- 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Chemical, Critical Manufacturing, Food and Agriculture, Healthcare and Public Health, Water and Wastewater
- Deployed
- Worldwide
- Vendor HQ
- United States
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2025-12768 | Out-of-bounds Write | 8.0 | – | No | A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device. |
| CVE-2026-12661 | Stack-based Buffer Overflow | 4.5 | – | No | A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive. |
Affected products (2)
- Rockwell Automation Series B: 5.202
- Rockwell Automation Series C: 7.101
Vendor fixes and mitigations (from advisory)
- Mitigation: Customers using the affected software, who are not able to upgrade to one of the corrected versions, should use Rockwell Automation's security best practices found at https://support.rockwellautomation.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight. link
- Mitigation: If you have any questions regarding the security issue(s) above and how to mitigate them, contact TechConnect for help. More information can be found at https://www.rockwellautomation.com/en-us/company/about-us/contact-us.html. link
- Mitigation: If you have any questions regarding this disclosure, please contact PSIRT Email: [email protected] link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.