Read the docs
TI-2021-12569 Aliases CVE-2021-32960GHSA-59hr-796q-5p86

Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure

Priority MEDIUM 45CWE-693Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-693.

Summary

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02433 84th percentileScored 2026-11-07
Fix Fixed FactoryTalk Services Platform (Rockwell Automation): 6.11

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellFactoryTalk Services Platformbefore 6.116.11Patch availableCNA
  • FactoryTalk Services Platform VendorRockwell Affected before 6.11 Fixed in 6.11 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*up to 6.11.00VulnerableRockwell
  • cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:* Versions up to 6.11.00 Vulnerable ·Rockwell

Remediation

  • Fix · CNA FactoryTalk Services Platform (Rockwell Automation) Fixed in 6.11

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-32960
  2. 2026-10-03 Alias added: GHSA-59hr-796q-5p86

References

Advisory 2

  • TI-2021-05574 Insufficiently protected credentials in Rockwell Automation Studio 5000 Logix Designer… KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-14577 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2020-11367 In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there… CVSS 3.1CRITICAL 10.0
  • TI-2020-05615 Deserialization of untrusted data in Rockwell Automation All versions of FactoryTalk… CVSS 3.1CRITICAL 9.8
  • TI-2023-24910 Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability CVSS 3.1HIGH 8.1
  • TI-2024-14575 Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality CVSS 3.1CRITICAL 9.0
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences