CVE-2021-32960

Katalog CVE

CVSS 8.8 · High EPSS 2,4%

Kerentanan Incorrect Authorization pada rockwellautomation factorytalk services platform. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

Rincian

Terbit di NVD

1 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization
CWE-693: Protection Mechanism Failure

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131785 permissions required · advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-01 mitigasi · advisory pihak ketiga · pemerintah AS