Rockwellautomation: >> Factorytalk Assetcentre Security Vulnerabilities
The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.
CVSS Score
10.0
EPSS Score
0.001
Published
2022-03-23
A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
CVSS Score
10.0
EPSS Score
0.004
Published
2022-03-23
Page 2