CVE-2021-32960

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Services Platform versions prior to 6.12

Description The issue allows a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

Recommendations For Rockwell Automation FactoryTalk Services Platform versions prior to 6.12, update to a version later than 6.11 to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.