Vulnerabilities

TI-2025-00394 CVE-2025-0477 · GHSA-49jj-m435-g94r

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

MEDIUM 48

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00381 Published 2025-01-30 No fix listed CWE-522

TI-2025-00412 CVE-2025-0497 · GHSA-6cxx-5fj7-8mm3

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

LOW 34

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00325 Published 2025-01-30 No fix listed CWE-522

TI-2025-00413 CVE-2025-0498 · GHSA-m9wf-858v-4363

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

LOW 33

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00381 Published 2025-01-30 No fix listed CWE-522

TI-2021-08962 CVE-2021-27476 · GHSA-jqv7-vfjc-8xpm

Rockwell Automation FactoryTalk AssetCentre OS Command Injection

MEDIUM 56

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04111 Published 2022-03-23 No fix listed CWE-78

TI-2021-08956 CVE-2021-27470 · GHSA-36p2-8879-3c27

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

MEDIUM 55

A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03828 Published 2022-03-23 No fix listed CWE-502

TI-2021-08953 CVE-2021-27466 · GHSA-9r5x-crjw-6ghj

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

MEDIUM 55

A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03886 Published 2022-03-23 No fix listed CWE-502

TI-2021-08960 CVE-2021-27474 · GHSA-cg2f-j69h-xcx2

Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function

MEDIUM 52

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01612 Published 2022-03-23 No fix listed CWE-676

TI-2021-08955 CVE-2021-27468 · GHSA-96fc-rpmh-h3v4

Rockwell Automation FactoryTalk AssetCentre SQL Injection

MEDIUM 55

The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03493 Published 2022-03-23 No fix listed CWE-89

TI-2021-08958 CVE-2021-27472 · GHSA-h3rx-5ggg-649j

Rockwell Automation FactoryTalk AssetCentre SQL Injection

MEDIUM 57

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL state…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.05657 Published 2022-03-23 No fix listed CWE-89

TI-2021-08951 CVE-2021-27464 · GHSA-p36c-m5h6-x7pp

Rockwell Automation FactoryTalk AssetCentre SQL Injection

MEDIUM 55

The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03481 Published 2022-03-23 No fix listed CWE-89

TI-2021-08949 CVE-2021-27462 · GHSA-qhg7-hg3p-3hfq

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

MEDIUM 55

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03828 Published 2022-03-23 No fix listed CWE-502

TI-2021-08947 CVE-2021-27460 · GHSA-v749-5446-q4q4

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

MEDIUM 55

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03195 Published 2022-03-23 No fix listed CWE-502

Vulnerabilities

Filters