Factorytalk® Service Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwell_automation:factorytalk®_service_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545) |
|---|---|
| Product | Factorytalk® Service Platform (975acda3-f989-5438-ac8b-09c65c88acd8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21917 |
vulnerable | 2026-06-08 06:29:32.630336 |
Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability
CRITICAL (9.8)
A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a malicious user could potentially retrieve user information and modify settings without any authentication.
Published: 2024-01-31T18:16:27.949Z
Updated: 2026-01-15T15:34:26.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21915 |
vulnerable | 2026-06-08 06:29:32.615946 |
Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality
CRITICAL (9)
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable.
Published: 2024-02-16T18:20:43.862Z
Updated: 2024-08-28T16:49:41.429Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.