PT-2022-9830
CVE-2021-27468
·
Published
2022-03-23
·
Updated
2022-03-29
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Rockwell Automation FactoryTalk AssetCentre versions prior to 10.00
Description
The issue concerns the AosService.rem service, which exposes functions without proper authentication, potentially allowing a remote, unauthenticated attacker to execute arbitrary SQL statements.
Recommendations
For versions prior to 10.00, update to a version that includes proper authentication for the AosService.rem service to prevent unauthorized access.
Found an issue in the description? Have something to add? Feel free to write us 👾