Rockwell Automation FactoryTalk Services Platform
view advisory published 2021-02-23
Successful exploitation of this vulnerability could allow a remote, unauthenticated attacker to create new users in the FactoryTalk Services Platform administration console. These new users could allow an attacker to modify or delete configuration and application data in other FactoryTalk software connected to the FactoryTalk Services Platform.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14516US | critical10.0 | — | ||
In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Servi… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationFactoryTalk Services Platform
Rockwell Automation has released a new version of the affected software for download (login required).
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1088797
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan