PT-2022-9826 · Rockwell Automation · Factorytalk Assetcentre

Published 1999-01-01 · Updated 2022-03-29 · CVE-2021-27460

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk AssetCentre versions 10.00 and earlier

Description The issue concerns .NET remoting endpoints deserializing untrusted data without proper validation, potentially allowing a remote, unauthenticated attacker to gain full access to the main server and all agent machines.

Recommendations For versions 10.00 and earlier, consider disabling the .NET remoting endpoints as a temporary workaround until a patch is available. Restrict access to the FactoryTalk AssetCentre main server and agent machines to minimize the risk of exploitation.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-27460

DOTNETREMOTINGCHECK

Affected Products

Factorytalk Assetcentre

References · 4

• https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27460 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-21-091-01 · Note