PT-2025-3990 · Rockwell Automation · Powerflex 755

Published 2025-01-28 · Updated 2025-07-15 · CVE-2025-0631

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation PowerFlex 755 (affected versions not specified) Oracle WebLogic Server (affected versions not specified)

Description A credential exposure vulnerability exists due to the use of HTTP, resulting in credentials being sent in clear text. This issue is actively exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-0631

Affected Products

Powerflex 755

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2025-0631 · Security Note
• https://twitter.com/transilienceai/status/1897998873915723875 · Twitter Post
• https://t.me/cvedetector/16617 · Telegram Post
• https://twitter.com/syedaquib77/status/1894750783259959441 · Twitter Post
• https://twitter.com/transilienceai/status/1895445950899913048 · Twitter Post
• https://twitter.com/transilienceai/status/1898525315237876045 · Twitter Post
• https://twitter.com/transilienceai/status/1898342393377690000 · Twitter Post
• https://twitter.com/transilienceai/status/1898887667787747568 · Twitter Post
• https://twitter.com/transilienceai/status/1899070819621331358 · Twitter Post
• https://twitter.com/transilienceai/status/1897261660726804542 · Twitter Post
• https://twitter.com/CVEnew/status/1884311570634690832 · Twitter Post
• https://twitter.com/transilienceai/status/1895623872470462535 · Twitter Post
• https://twitter.com/transilienceai/status/1894723209372614712 · Twitter Post
• https://twitter.com/transilienceai/status/1896889146402083148 · Twitter Post
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1717.html · Note