Deserialization in Rockwell Automation Factorytalk Assetcentre
CVE-2021-27460
Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthenticated attacker to gain full access to the FactoryTalk AssetCentre main server and all agent machines.
Vulnerability class: Insecure Deserialization
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H.
EPSS exploit prediction
EPSS: 0.032 (87.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 88th percentile — 87.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.032 · newest: 0.032 · change: 0.000
Affected products
- Rockwell Automation Factorytalk Assetcentre — versions unspecified
- Rockwellautomation Factorytalk Assetcentre
Weakness classification (CWE)
References
- www.cisa.gov/uscert/ics/advisories/icsa-21-091-01 (US Government Resource, Third Party Advisory)
- idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx (Vendor Advisory, Permissions Required)
Frequently asked questions
- What is CVE-2021-27460?
- CVE-2021-27460 is a critical-severity vulnerability in Rockwell Automation Factorytalk Assetcentre, classified under Deserialization of Untrusted Data. CVSS score: 10.0/10. Published 2022-03-23.
- How severe is CVE-2021-27460?
- Critical severity. CVSS v3 base score is 10.0 out of 10.