Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2025-0477

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2025-0497

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2025-0498

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27460

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthenticated attacker to gain full access to the FactoryTalk AssetCentre main server and all agent machines.

CVSS 3.1 · 10 Critical EPSS 3.2% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27462

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.

CVSS 3.1 · 10 Critical EPSS 3.8% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27464

Rockwell Automation FactoryTalk AssetCentre SQL Injection

The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.

CVSS 3.1 · 10 Critical EPSS 3.5% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27472

Rockwell Automation FactoryTalk AssetCentre SQL Injection

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements.

CVSS 3.1 · 10 Critical EPSS 5.7% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27468

Rockwell Automation FactoryTalk AssetCentre SQL Injection

The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements.

CVSS 3.1 · 10 Critical EPSS 3.5% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27474

Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.

CVSS 3.1 · 10 Critical EPSS 1.6% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27466

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.

CVSS 3.1 · 10 Critical EPSS 3.9% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27470

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data

A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.

CVSS 3.1 · 10 Critical EPSS 3.8% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-27476

Rockwell Automation FactoryTalk AssetCentre OS Command Injection

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier.

CVSS 3.1 · 10 Critical EPSS 4.1% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre