FS
Product
Factorytalk Services Platform
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 0Low 0
Watch
Add Factorytalk Services Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22681 In wildKEV | 9.8 | Mar 3 | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Affected: 2.10 and later |
| CVE-2020-14516 | 10.0 | Mar 18 | In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk… Affected: 6.10.00; 6.11.00 |
| CVE-2020-6967 | 9.8 | Mar 23 | In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint… Affected: All versions, or not specified |
| CVE-2024-21917 | 9.1 | Jan 31 | A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP… Affected: through 6.31.00 |
| CVE-2024-21915 | 8.8 | Feb 16 | A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP) Affected: before 2.74 |
| CVE-2021-32960 | 8.8 | Apr 1 | Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote,… Affected: through 6.11.00 |
| CVE-2020-12033 | 8.8 | Jun 23 | In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an… Affected: All versions, or not specified |
| CVE-2023-46290 | 8.1 | Oct 27 | Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web… Affected: before 2.80 |
| CVE-2018-18981 | 7.5 | Jan 24 | In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory… Affected: through 2.90 |
| CVE-2020-14478 | 7.1 | Feb 24 | A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content Affected: through 6.11.00 |
| CVE-2014-9209 | – | Mar 31 | Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and… Affected: through 2.70.00 |
| CVE-2012-4714 | – | Apr 18 | Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6… Affected: cpr9; cpr9; cpr9; cpr9; cpr9; cpr9; +2 more |
| CVE-2012-4713 | – | Apr 18 | Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and… Affected: cpr9; cpr9; cpr9; cpr9; cpr9; cpr9; +2 more |
Showing 13