CVE-2021-27476

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier...

Command injection

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier...

CVE-2021-27476

The CVE-2021-27476 issue affects Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier) with a flaw in the SaveConfigFile function of the RACompare Service that may allow an unauthenticated remote attacker to inject and execute OS commands. Impact is described as arbitrary command execu...

PT-2021-7076

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk AssetCentre versions prior to 10.00 Description A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This issue may allow a remote,...