CVE-2021-22665

2021-03-1817:03:43

CWE-427

icscert

www.cve.org

rockwell automation

software vulnerability

local attacker

privilege escalation

complete control

EPSS

Percentile

0.4%

JSON

Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may be able to exploit resulting in privilege escalation and complete control of the system.

CNA Affected

[
  {
    "product": "Rockwell Automation DriveTools SP and Drives AOP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "DriveTools SP v5.13 and below and Drives AOP v4.12 and below"
      }
    ]
  }
]