CVE-2026-10714: Weak Authentication

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

CVE-2025-7972: Incorrect User Management

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODEENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers...

Rockwell FactoryTalk Services Platform < 2.74 Privilege Escalation

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is less than 2.74. It is, therefore, affected by a vulnerability. - A privilege escalation vulnerability exists in FactoryTalk® Service Platform FTSP. If exploited, a malicious user with basic user group...

CVE-2024-21915

CVE-2024-21915 affects Rockwell Automation’s FactoryTalk Service Platform (FTSP) before version 2.74. The vulnerability allows a user with basic privileges to escalate to FTSP Administrator privileges, enabling reading/modifying sensitive data, data deletion, and potential FTSP service disruption...

CVE-2024-21915 Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform FTSP. If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read an...

Integer overflow

Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform FTSP CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service service outage or RNADiagReceiver.exe daemon crash via UDP data th...

CVE-2012-4714

Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9 through CPR9-SR6 contains an integer overflow in RNADiagnostics.dll that allows remote attackers to cause a DoS by sending UDP datagrams with large integers, potentially crashing RNADiagReceiver.exe. All affected versions should upgrad...

CVE-2012-4713

The CVE-2012-4713 entry concerns Rockwell Automation FactoryTalk Services Platform (RNADiagnostics.dll) with affected CPR9 through CPR9-SR6. The root cause is an integer signedness/input validation issue that allows remote attackers to trigger a DoS by sending UDP datagrams containing a negative ...

CVE-2012-4714: Undefined Security Weakness

Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform FTSP CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service service outage or RNADiagReceiver.exe daemon crash via UDP data th...