QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-9067

Back to search

CVE-2025-9067

Published: Oct 14, 2025

Modified: Oct 14, 2025

PUBLISHED

Description

A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting console window. This allows the launching of a command prompt running with SYSTEM-level privileges, allowing full access to all files, processes, and system resources.

VendorProductVersions

Rockwell Automation

FactoryTalk Linx

affected
6.40 and prior

Weaknesses (CWE)

CWE-269

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now