10.0
Critique
CVE-2021-27470 A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk…
Description
A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FactoryTalk AssetCentre 10.00 | premières → 10.00 | Pas de correctif indiqué |
Autres CVE de FactoryTalk AssetCentre
Les 9 CVE de FactoryTalk AssetCentre →
CVE-2021-27476
A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection
10.0
Critique
CVE-2021-27466
A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk…
10.0
Critique
CVE-2021-27474
Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to…
10.0
Critique
CVE-2021-27468
The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking…
10.0
Critique