PT-2022-9830
CVE-2021-27468
·
تاريخ النشر
2022-03-23
·
تاريخ التحديث
2022-03-29
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Rockwell Automation FactoryTalk AssetCentre versions prior to 10.00
Description
The issue concerns the AosService.rem service, which exposes functions without proper authentication, potentially allowing a remote, unauthenticated attacker to execute arbitrary SQL statements.
Recommendations
For versions prior to 10.00, update to a version that includes proper authentication for the AosService.rem service to prevent unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾