PT-2022-9831
CVE-2021-27470
·
Published
2021-04-01
·
Updated
2022-03-29
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Rockwell Automation FactoryTalk AssetCentre versions prior to v10.00
Description
A deserialization issue exists in the LogService.rem service, potentially allowing a remote, unauthenticated attacker to execute arbitrary commands.
Recommendations
For versions prior to v10.00, update to a version later than v10.00 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾