10.0
Critical
CVE-2021-27462 A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk…
Description
A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FactoryTalk AssetCentre 10.00 | earliest → 10.00 | No fix stated |
Other CVEs of FactoryTalk AssetCentre
The 9 CVEs of FactoryTalk AssetCentre →
CVE-2021-27476
A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection
10.0
Critical
CVE-2021-27470
A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk…
10.0
Critical
CVE-2021-27466
A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk…
10.0
Critical
CVE-2021-27474
Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to…
10.0
Critical