CVE-2021-32960: fallo de gravedad alta en Rockwell Automation FactoryTalk Services…
Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.5epss 2.4%
Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Rockwell Automation · FactoryTalk Services PlatformCVEs relacionadas — Rockwell Automation FactoryTalk Services…
En el mismo producto, de las más peligrosas a las menos.