Factorytalk® Services Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwell_automation:factorytalk®_services_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545) |
|---|---|
| Product | Factorytalk® Services Platform (44c4c763-d277-58d9-aa6c-8063143bb0b5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10714 |
vulnerable | 2026-07-29 00:23:30.235182 |
Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass
A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the algorithm to "none" and craft forged tokens. This could allow an authenticated low-privilege user to impersonate any authorized user on the FTSP server, resulting in unauthorized access to system configuration and the ability to grant permissions to other systems protected by FTSP.
Published: 2026-07-14T15:02:09.653Z
Updated: 2026-07-14T15:26:53.203Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46290 |
vulnerable | 2026-06-08 06:12:44.615782 |
Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability
HIGH (8.1)
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service.
Published: 2023-10-27T18:10:50.923Z
Updated: 2025-02-27T20:39:11.981Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.