CVE-2025-11084— FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass
Quick assessment
Affected
Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Rockwell Automation DataMosaix Private Cloud是美国罗克韦尔（Rockwell Automation）公司的一款工业 DataOps 解决方案。用于简化和控制对相关、可靠和情境化数据的访问。 Rockwell Automation DataMosaix Private Cloud存在安全漏洞，该漏洞源于多因素认证启用后7天内未完成设置时，攻击者可绕过多因素认证获取有效登录令牌，无需知晓用户密码。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-11084
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1390
Source: CVE Program / CVE List V5
Vulnerability Title
Rockwell Automation DataMosaix Private Cloud 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rockwell Automation DataMosaix Private Cloud是美国罗克韦尔（Rockwell Automation）公司的一款工业 DataOps 解决方案。用于简化和控制对相关、可靠和情境化数据的访问。 Rockwell Automation DataMosaix Private Cloud存在安全漏洞，该漏洞源于多因素认证启用后7天内未完成设置时，攻击者可绕过多因素认证获取有效登录令牌，无需知晓用户密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rockwell Automation | FactoryTalk® DataMosaix™ Private Cloud | 7.11, 8.00, 8.01 | - |
|
II. Public POCs for CVE-2025-11084
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-11084
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-11084 (1)
Same Patch Batch · Rockwell Automation · 2025-11-11 · 5 CVEs total
| CVE-2025-11862 | Verve Asset Manager Access Control Vulnerability | |
| CVE-2025-11697 | Studio 5000 ® Simulation Interface Local Code Execution | |
| CVE-2025-11696 | Studio 5000 ® Simulation Interface SSRF | |
| CVE-2025-11085 | FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS |
IV. Related Vulnerabilities
Same vendor: Rockwell Automation
-
CVE-2026-12656
1732E ArmorBlock® - Multiple Vulnerabilities -
CVE-2026-12655
1732E ArmorBlock® - Multiple Vulnerabilities -
CVE-2026-6071
Code Execution Vulnerability in Arena® -
CVE-2024-7956
Sensitive Data Exposure and Escalating Privileges Vulnerabil -
CVE-2024-7953
DataEdgePlatform DataMosaix™ Private Cloud
Same weakness: CWE-1390
-
CVE-2026-69802
Network Device Enrollment Service (NDES) Remote Code Executi -
CVE-2026-85922
Azure Key Vault Security Feature Bypass Vulnerability -
CVE-2026-83840
Windows Error Reporting Elevation of Privilege Vulnerability -
CVE-2026-83511
Active Directory Federation Services (AD FS) Spoofing Vulner -
CVE-2026-70005
Active Directory Federation Services (AD FS) Security Featur
V. Comments for CVE-2025-11084
No comments yet