CVE-2021-27468 Rockwell Automation FactoryTalk AssetCentre SQL Injection

The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements...

CVE-2021-27468

Affected product: Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier).Vulnerable component: AosService.rem service, exposing functions with insufficient authentication.Vulnerability type/root cause: SQL Injection allowing execution of arbitrary SQL statements via remote, unauthentica...

CVE-2021-27472 Rockwell Automation FactoryTalk AssetCentre SQL Injection

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

CVE-2021-27472

CVE-2021-27472 affects Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier) with a SQL Injection in the RunSearch function of the SearchService, enabling remote unauthenticated arbitrary SQL execution. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE list) an...

CVE-2021-27472 Rockwell Automation FactoryTalk AssetCentre SQL Injection

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre...

CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre...

CVE-2021-27464 Rockwell Automation FactoryTalk AssetCentre SQL Injection

The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements...

CVE-2021-27464

CVE-2021-27464 affects Rockwell Automation FactoryTalk AssetCentre (ArchiveService.rem) on v10.00 and earlier, where functions lack proper authentication, enabling a remote, unauthenticated attacker to execute arbitrary SQL statements. Connected sources corroborate a broader set of SQL/command-in...

CVE-2021-27464 Rockwell Automation FactoryTalk AssetCentre SQL Injection

The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements...

CVE-2021-27462

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier is affected by CVE-2021-27462 due to a deserialization vulnerability in the AosService.rem service that may allow a remote, unauthenticated attacker to execute arbitrary commands on vulnerable systems. The Red Hat and NVD entries corr...

CVE-2021-27460 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthenticated attacker to gain full access to th...

CVE-2021-27460

CVE-2021-27460 affects Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier . The issue stems from deserializing untrusted data via .NET remoting endpoints, which could allow a remote, unauthenticated attacker to gain full access to the FactoryTalk AssetCentre main server and all agent ...

CVE-2021-27460 Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthenticated attacker to gain full access to th...

Rockwell (CVE-2020-14481) (deprecated)

Plugin deprecated because factorytalk is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because...

Rockwell (CVE-2020-14478) (deprecated)

Plugin deprecated because factorytalk is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because...

CVE-2020-14481

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

CVE-2020-14481

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

Default credentials

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain...

CVE-2020-14481

The CVE-2020-14481 entry concerns the DeskLock tool in Rockwell Automation’s FactoryTalk View SE, where the DeskLock password encoding is weak. According to connected sources, a local, authenticated attacker could decipher credentials stored/processed by DeskLock, potentially gaining full access ...