CVE-2021-27476

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier...

Command injection

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier...

CVE-2021-27476

The CVE-2021-27476 issue affects Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier) with a flaw in the SaveConfigFile function of the RACompare Service that may allow an unauthenticated remote attacker to inject and execute OS commands. Impact is described as arbitrary command execu...