CVE-2021-27468

Affected product: Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier).Vulnerable component: AosService.rem service, exposing functions with insufficient authentication.Vulnerability type/root cause: SQL Injection allowing execution of arbitrary SQL statements via remote, unauthentica...

CVE-2021-27468 Rockwell Automation FactoryTalk AssetCentre SQL Injection

The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements...