FS
Product
Factorytalk Services Platform
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 0Low 0
Watch
Add Factorytalk Services Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21915 | 8.8 | Feb 16 | A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP) Affected: before 2.74 |
| CVE-2021-32960 | 8.8 | Apr 1 | Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote,… Affected: through 6.11.00 |
| CVE-2020-12033 | 8.8 | Jun 23 | In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an… Affected: All versions, or not specified |
| CVE-2023-46290 | 8.1 | Oct 27 | Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web… Affected: before 2.80 |
| CVE-2018-18981 | 7.5 | Jan 24 | In Rockwell Automation FactoryTalk Services Platform 2.90 and earlier, a remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory… Affected: through 2.90 |
| CVE-2020-14478 | 7.1 | Feb 24 | A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content Affected: through 6.11.00 |
Showing 6