Skip to content
OpenAdvisories
Critical ICSA-24-030-06 1 CVE

Rockwell Automation FactoryTalk Service Platform

Published Jan 30, 2024 · Updated Jan 30, 2024

Vendor: Rockwell Automation Product: FactoryTalk® Service Platform

Summary

Successful exploitation of this vulnerability could allow an attacker to retrieve user information and modify settings without any authentication.

Vulnerabilities 1

  • Critical 9.8
    CVE-2024-21917

    Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability

    A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service t…

    Rockwell Automation FactoryTalk® Service Platform ICS / OT

Revision history

  1. #1

    Initial Publication

References