CVE-2021-27476criticalCWE-78

CVE-2021-27476: falha crítica em Rockwell Automation FactoryTalk AssetCentre

Rockwell Automation FactoryTalk AssetCentre OS Command Injection

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FactoryTalk AssetCentre

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 4.1%
A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
Produtos afetados
Rockwell Automation · FactoryTalk AssetCentre
CVEs relacionadas — Rockwell Automation FactoryTalk AssetCentre

No mesmo produto, das mais perigosas para as menos.

CVE-2021-27472CRITICALRockwell Automation FactoryTalk AssetCentre SQL InjectionEPSS 5.7%CVE-2021-27466CRITICALRockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted DataEPSS 3.9%CVE-2021-27470CRITICALRockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted DataEPSS 3.8%CVE-2021-27462CRITICALRockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted DataEPSS 3.8%CVE-2021-27468CRITICALRockwell Automation FactoryTalk AssetCentre SQL InjectionEPSS 3.5%CVE-2021-27464CRITICALRockwell Automation FactoryTalk AssetCentre SQL InjectionEPSS 3.5%