Rockwellautomation Factorytalk Assetcentre vulnerabilities

12 CVEs affecting Rockwellautomation Factorytalk Assetcentre, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-0498, published 2025-01-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27472, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote…
CVE-2021-27476, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days. A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute…
CVE-2021-27466, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a…
CVE-2021-27470, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a…
CVE-2021-27462, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a…
CVE-2021-27468, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated…
CVE-2021-27464, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote,…
CVE-2021-27460, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days. Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will…
CVE-2021-27474, published 2022-03-23. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated…
CVE-2025-0498, published 2025-01-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security…

Latest

CVE-2025-0497, published 2025-01-30. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file…
CVE-2025-0477, published 2025-01-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a…