PT-2024-1615 · Rockwell Automation · Factorytalk Services Platform

Published 2024-01-30 · Updated 2026-01-15 · CVE-2024-21917

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Service Platform (affected versions not specified)

Description The issue is related to incorrect cryptographic signature verification in the FactoryTalk Services Platform, which can allow a remote attacker to gain unauthorized access to protected information and modify arbitrary settings. A malicious user can obtain a service token and use it for authentication on another FTSP directory due to the lack of digital signing between the FTSP service token and directory. If exploited, a malicious user could potentially retrieve user information and modify settings without any authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-345

CWE-347

Related Identifiers

BDU:2024-01241

CVE-2024-21917

Affected Products

Factorytalk Services Platform

References · 11

• https://rockwellautomation.com/en-us/support/advisory.SD1660.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21917 · Security Note
• https://bdu.fstec.ru/vul/2024-01241 · Security Note
• https://osv.dev/vulnerability/CVE-2024-21917 · Vendor Advisory
• https://twitter.com/0dayPublishing/status/2011825981858684967 · Twitter Post
• https://twitter.com/CVEnew/status/1752760120298127626 · Twitter Post
• https://t.me/true_secator/5765 · Telegram Post
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1660.html · Note
• https://t.me/cvenotify/70528 · Telegram Post
• https://vuldb.com/ru/?id.252447 · Note
• https://twitter.com/VulmonFeeds/status/1752417838000730167 · Twitter Post