CVE-2025-14272
View CSAF Summary Successful exploitation of this vulnerability could result in an attacker executing privileged operations. The following versions of Rockwell Automation FactoryTalk Analytics Pavi...
Affects 0 products across 1 vendor.
Software does not check whether an authenticated actor has permission for the requested operation.
Rockwell Automation FactoryTalk Analytics PavilionX versions prior to 7.01 contain a Missing Authorization vulnerability (CVE-2025-14272, CVSS 7.0) that allows an attacker to execute privileged operations without proper authorization checks. An authenticated or potentially unauthenticated attacker could leverage this flaw to perform administrative actions within the analytics platform, potentially manipulating process data, altering analytics models, or pivoting to connected OT systems. In OT environments, this poses significant risk as PavilionX is deployed in critical manufacturing sectors where unauthorized privileged access could disrupt process optimization and monitoring.
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-14272?
Is CVE-2025-14272 actively exploited?
How do I remediate CVE-2025-14272?
What systems are affected by CVE-2025-14272?
| CVE ID | CVE-2025-14272 |
|---|---|
| Published | 2026-06-16 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 80% |
| Weakness (CWE) | |
| Source | NVD |
View CSAF Summary Successful exploitation of this vulnerability could result in an attacker executing privileged operations. The following versions of Rockwell Automation FactoryTalk Analytics PavilionX are affected: FactoryTalk Analytics PavilionX <7.01 (CVE-2025-14272) CVSS Vendor Equipment Vulnerabilities v3 7 Rockwell Automation Rockwell Automation FactoryTalk Analytics PavilionX Missing Authorization Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed
Source: NIST NVD / MITRE CVE Database
| Vendor | Product | Fixed Version |
|---|---|---|
| Rockwell Automation | — | — |
Fixed Version: 7.01
FactoryTalk Analytics PavilionX version 7.01 remediates CVE-2025-14272 by implementing proper authorization controls on privileged operations that were previously accessible without adequate permission verification, preventing unauthorized execution of elevated functions within the analytics platform.
View Vendor Advisory →| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Deploy IDS/IPS rules at the network perimeter and OT DMZ boundary to detect and alert on high-frequency or anomalous POST requests targeting PavilionX API endpoints, particularly those invoking administrative or privileged paths. Block all access to PavilionX HTTP/HTTPS management interfaces from untrusted network segments and enforce IP allowlisting at the firewall. Monitor for lateral movement from PavilionX servers toward PLCs or historians.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. SAGE only publishes a network rule when a concrete on-the-wire signature can be grounded in the advisory.
Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.
Join free →