Factorytalk Assetcentre
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwell_automation:factorytalk_assetcentre:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545) |
|---|---|
| Product | Factorytalk Assetcentre (e8b75085-d980-5e61-8773-a2fdc9e255ef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-27476 |
vulnerable | 2026-06-08 05:31:21.640294 |
Rockwell Automation FactoryTalk AssetCentre OS Command Injection
CRITICAL (10)
A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier.
Published: 2022-03-23T19:46:36.000Z
Updated: 2025-04-16T16:38:33.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27474 |
vulnerable | 2026-06-08 05:31:21.639200 |
Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function
CRITICAL (10)
Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.
Published: 2022-03-23T19:46:33.000Z
Updated: 2025-04-16T16:39:18.735Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27472 |
vulnerable | 2026-06-08 05:31:21.637916 |
Rockwell Automation FactoryTalk AssetCentre SQL Injection
CRITICAL (10)
A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements.
Published: 2022-03-23T19:46:31.000Z
Updated: 2025-04-16T16:39:37.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27470 |
vulnerable | 2026-06-08 05:31:21.630473 |
Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
CRITICAL (10)
A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
Published: 2022-03-23T19:46:35.000Z
Updated: 2025-04-16T16:38:56.225Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27468 |
vulnerable | 2026-06-08 05:31:21.629915 |
Rockwell Automation FactoryTalk AssetCentre SQL Injection
CRITICAL (10)
The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.
Published: 2022-03-23T19:46:32.000Z
Updated: 2025-04-16T16:39:28.963Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27466 |
vulnerable | 2026-06-08 05:31:21.628568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27464 |
vulnerable | 2026-06-08 05:31:21.627243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27462 |
vulnerable | 2026-06-08 05:31:21.625625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27460 |
vulnerable | 2026-06-08 05:31:21.623355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.