CVE-2021-32960

Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure

High · published April 1, 2022

CVSS v3.1
8.5
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02433 · 84.1th percentile
Published
2022-04-01T22:17Z
EPSS history
Timeline
  • 01 APR 22:17Z
    Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure
    cvelistv5