Vulnerability · Published Oct 14, 2025 · Assigned by Rockwell

CVE-2025-9063Rockwell Automation PanelView Plus 7 Performance Series B Authentication Bypass

High 7.0

In plain English

A high-severity improper authentication in PanelView Plus 7 Performance Series B from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 4.0)7.0High

Exploit odds (30 days)0.4%top 65.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B, including access to the file system, retrieval of diagnostic information, event logs, and more.

Affected products (as reported)

Vendor	Product	Versions
Rockwell Automation	PanelView Plus 7 Performance Series B	V14.00

Weakness: CWE-287 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1753.html