Skip to content
OpenAdvisories
Critical ICSA-21-091-01 9 CVEs

Rockwell Automation FactoryTalk AssetCentre

Published Apr 1, 2021 · Updated Apr 1, 2021

Vendor: Rockwell Automation Product: FactoryTalk® AssetCentre

Summary

Successful exploitation of these vulnerabilities may allow unauthenticated attackers to perform arbitrary command execution, SQL injection, or remote code execution.

Vulnerabilities 9

  • Critical 10.0
    CVE-2021-27460 Public exploit

    Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

    Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthentica…

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27462

    Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

    A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands …

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27464

    Rockwell Automation FactoryTalk AssetCentre SQL Injection

    The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27466

    Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

    A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary comma…

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27468

    Rockwell Automation FactoryTalk AssetCentre SQL Injection

    The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27470

    Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

    A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands …

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27472

    Rockwell Automation FactoryTalk AssetCentre SQL Injection

    A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements.

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27474

    Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function

    Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 10.0
    CVE-2021-27476

    Rockwell Automation FactoryTalk AssetCentre OS Command Injection

    A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCen…

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT

Revision history

  1. #1

    ICSA-21-091-01 Rockwell Automation FactoryTalk AssetCentre

References