CVE-2021-32960highCWE-693

CVE-2021-32960: high-severity vulnerability in Rockwell Automation FactoryTalk Services…

Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.5epss 2.4%
Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Related CVEs — Rockwell Automation FactoryTalk Services…

In the same product, most dangerous first.