Vulnerability · Published Apr 1, 2022 · Assigned by icscert

CVE-2021-32960Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure

High 8.5

In plain English

A high-severity security flaw in FactoryTalk Services Platform from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities).

Severity (CVSS 3.1)8.5High

Exploit odds (30 days)2.4%top 15.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

Affected products (as reported)

Vendor	Product	Versions
Rockwell Automation	FactoryTalk Services Platform	unspecified – before 6.11

Weakness: CWE-693 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-01 x_refsource_CONFIRM
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131785 x_refsource_CONFIRM