Lucene search
K

6 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.2 views

The vulnerability of the RunSearch function of the SearchService service in the FactoryTalk AssetCentre software platform allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the RunSearch function in the SearchService service of the FactoryTalk AssetCentre software platform for centralized asset management involves a lack of measures to protect the SQL query structure. Exploiting this vulnerability could allow an attacker to execute arbitrary SQL...

10CVSS8.2AI score0.0532EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/03/23 8:15 p.m.2 views

CVE-2021-27472

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

9.8CVSS6AI score
Exploits0References2
NVD
NVD
added 2022/03/23 8:15 p.m.13 views

CVE-2021-27472

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

10CVSS0.0532EPSS
Exploits0References2
Prion
Prion
added 2022/03/23 8:15 p.m.14 views

Design/Logic Flaw

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

7.5CVSS9.7AI score0.0532EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/23 7:46 p.m.13 views

CVE-2021-27472 Rockwell Automation FactoryTalk AssetCentre SQL Injection

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements...

10CVSS10AI score0.0532EPSS
Exploits0References2
CVE
CVE
added 2022/03/23 7:46 p.m.88 views

CVE-2021-27472

CVE-2021-27472 affects Rockwell Automation FactoryTalk AssetCentre (v10.00 and earlier) with a SQL Injection in the RunSearch function of the SearchService, enabling remote unauthenticated arbitrary SQL execution. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE list) an...

10CVSS9.9AI score0.0532EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder