CVE-2021-27472: Rockwellautomation Factorytalk Assetcentre

Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days.

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements.

Affected products

• Rockwellautomation Factorytalk Assetcentre: up to and including 10.00

Published 2022-03-23. Last modified 2026-06-17.