Factorytalk Assetcentre
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwellautomation:factorytalk_assetcentre:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba) |
|---|---|
| Product | Factorytalk Assetcentre (ddd4aec7-1e9f-5b53-92ba-014c79290d60) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0498 |
vulnerable | 2026-06-08 07:02:24.716396 |
Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.
Published: 2025-01-30T17:36:12.542Z
Updated: 2025-02-12T19:51:11.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0497 |
vulnerable | 2026-06-08 07:02:24.715912 |
Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.
Published: 2025-01-30T17:40:51.775Z
Updated: 2025-02-12T19:51:11.273Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0477 |
vulnerable | 2026-06-08 07:02:24.677100 |
Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability
An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.
Published: 2025-01-30T17:49:03.933Z
Updated: 2025-02-12T19:51:11.151Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27476 |
vulnerable | 2026-06-08 05:31:21.640326 |
Rockwell Automation FactoryTalk AssetCentre OS Command Injection
CRITICAL (10)
A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier.
Published: 2022-03-23T19:46:36.000Z
Updated: 2025-04-16T16:38:33.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27474 |
vulnerable | 2026-06-08 05:31:21.639234 |
Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function
CRITICAL (10)
Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.
Published: 2022-03-23T19:46:33.000Z
Updated: 2025-04-16T16:39:18.735Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27472 |
vulnerable | 2026-06-08 05:31:21.637957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27470 |
vulnerable | 2026-06-08 05:31:21.630596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27468 |
vulnerable | 2026-06-08 05:31:21.629957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27466 |
vulnerable | 2026-06-08 05:31:21.628598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27464 |
vulnerable | 2026-06-08 05:31:21.627278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27462 |
vulnerable | 2026-06-08 05:31:21.625660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27460 |
vulnerable | 2026-06-08 05:31:21.624015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.