Rockwell Automation Factorytalk Assetcentre
9 CVEs affecting Rockwell Automation Factorytalk Assetcentre. Latest disclosed: 2022-03-23. Critical: 9, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27476 | Critical | 10.0 | 2022-03-23 | A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote… |
CVE-2021-27474 | Critical | 10.0 | 2022-03-23 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability m… |
CVE-2021-27472 | Critical | 10.0 | 2022-03-23 | A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow fo… |
CVE-2021-27470 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized… |
CVE-2021-27468 | Critical | 10.0 | 2022-03-23 | The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerabilit… |
CVE-2021-27466 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies seriali… |
CVE-2021-27464 | Critical | 10.0 | 2022-03-23 | The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerab… |
CVE-2021-27462 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized… |
CVE-2021-27460 | Critical | 10.0 | 2022-03-23 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently… |