CVE-2021-27474

Publication date

2022-03-23 19:46:33

Family

icscert

State

PUBLISHED

Description

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.