SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2025-7970

An error in the implementation of cryptography within the software could allow attackers to decrypt traffic.

HIGH 8.7EPSS 0.37%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise.

CVSS 4.0
8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS
0.37% probability · 30th percentile
CISA KEV
Not listed
Weakness
CWE-306
Affected
rockwellautomation/factorytalk activation manager
Source
PSIRT@rockwellautomation.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.