CVE-2021-27462

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0670%

EPSS Percentile42.12th

Published2022年3月23日

Last Modified2024年11月21日

Vulnerability Description

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.

Affected Platforms (CPE)

📦

Rockwellautomation

Factorytalk Assetcentre

<= 10.00

References & Advisories

🔗 https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831

🔗 https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01