Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2021-27476

Rockwell Automation FactoryTalk AssetCentre OS Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk AssetCentre

  • unspecified to ≤ v10.00affected

References