ICSA-21-054-01

Rockwell Automation FactoryTalk Services Platform

Advisory ansehen veröffentlicht 2021-02-23

Successful exploitation of this vulnerability could allow a remote, unauthenticated attacker to create new users in the FactoryTalk Services Platform administration console. These new users could allow an attacker to modify or delete configuration and application data in other FactoryTalk software connected to the FactoryTalk Services Platform.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2020-14516US	critical10.0	4.24% (91st)	—	2021-03-18
In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Servi…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-21-054-01 JSONself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal
ICS Advisory ICSA-21-054-01 Web Versionself

Behebungen (1)

MitigationFactoryTalk Services Platform
Rockwell Automation has released a new version of the affected software for download (login required).
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1088797

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan