CVE-2021-32960 HIGH

CVE-2021-32960: Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure

Vendor Rockwell Automation
Product FactoryTalk Services Platform
Published April 1, 2022
Last update April 17, 2025

CVSS base score

8.5/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

Key dates

02Disclosure timeline

April 1, 2022 CVE published
April 17, 2025 Record updated