CVE-2025-12768: CWE-787 Out-of-bounds write in Rockwell Automation FactoryTalk® Historian Machine Edition

This vulnerability in FactoryTalk® Historian Machine Edition is caused by an out-of-bounds write condition (CWE-787). An attacker with low-level authentication privileges can exploit this flaw to execute arbitrary code remotely on the targeted system. The CVSS 4.0 base score is 8.6, reflecting the attack vector as adjacent network, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has not published any remediation or patch information, and the affected versions are not explicitly stated.

Successful exploitation allows remote code execution by an attacker with low-level authentication, potentially compromising the confidentiality, integrity, and availability of the affected system. This could lead to unauthorized control over the device running FactoryTalk® Historian Machine Edition.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system to trusted users only and monitor for suspicious activity involving low-level authenticated users.