Approved changes feed: RSS · Atom

cpe:2.3:a:rockwell_automation:factorytalk_services_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545)
ProductFactorytalk Services Platform (990535d1-f54e-5d0b-83e4-954f99b5cf72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32960 vulnerable 2026-06-08 05:32:08.267597 Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure
HIGH (8.5)
Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.
Published: 2022-04-01T22:17:11.000Z
Updated: 2025-04-17T15:51:28.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14478 vulnerable 2026-06-08 05:19:23.545412 IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611
A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services.
Published: 2022-02-24T18:27:13.156Z
Updated: 2025-04-17T18:48:04.974Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.