Read the docs
TI-2024-14575 Aliases CVE-2024-21915GHSA-2v5g-8cvx-qmfq

Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality

Priority MEDIUM 43CWE-732Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0099 62nd percentileScored 2026-11-07
Fix Fixed FactoryTalk® Service Platform (Rockwell Automation): v2.74

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellFactoryTalk® Service Platformbefore v2.74v2.74Patch availableCNA
  • FactoryTalk® Service Platform VendorRockwell Affected before v2.74 Fixed in v2.74 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*before 2.74VulnerableRockwell
  • cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:* Versions before 2.74 Vulnerable ·Rockwell

Remediation

  • Fix · CNA FactoryTalk® Service Platform (Rockwell Automation) Fixed in v2.74

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-21915
  2. 2026-10-03 Alias added: GHSA-2v5g-8cvx-qmfq

References

Advisory 1

  • TI-2021-05574 Insufficiently protected credentials in Rockwell Automation Studio 5000 Logix Designer… KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-14577 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2020-11367 In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there… CVSS 3.1CRITICAL 10.0
  • TI-2020-05615 Deserialization of untrusted data in Rockwell Automation All versions of FactoryTalk… CVSS 3.1CRITICAL 9.8
  • TI-2023-24910 Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability CVSS 3.1HIGH 8.1
  • TI-2021-12569 Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure CVSS 3.1HIGH 8.8
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences