Rockwellautomation Factorytalk_assetcentre
12 CVEs affecting Rockwellautomation Factorytalk_assetcentre. Latest disclosed: 2025-01-30. Critical: 12, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27476 | Critical | 10.0 | 2022-03-23 | A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote… |
CVE-2021-27474 | Critical | 10.0 | 2022-03-23 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability m… |
CVE-2021-27472 | Critical | 10.0 | 2022-03-23 | A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow fo… |
CVE-2021-27470 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized… |
CVE-2021-27468 | Critical | 10.0 | 2022-03-23 | The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerabilit… |
CVE-2021-27466 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies seriali… |
CVE-2021-27464 | Critical | 10.0 | 2022-03-23 | The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerab… |
CVE-2021-27462 | Critical | 10.0 | 2022-03-23 | A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized… |
CVE-2021-27460 | Critical | 10.0 | 2022-03-23 | Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently… |
CVE-2025-0498 | Critical | 9.8 | 2025-01-30 | A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insec… |
CVE-2025-0497 | Critical | 9.8 | 2025-01-30 | A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to stori… |
CVE-2025-0477 | Critical | 9.8 | 2025-01-30 | An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak… |