Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthenticated attacker to gain full access to the FactoryTalk AssetCentre main server and all agent machines.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 Public exploit out remote takeover via .NET remoting deserialization (CVE-2021-27460) A remote, unauthenticated attacker can gain full control of the main server and all connected agent machines. Disclosed Mar 23, 2022 No patch listed yet https://cve.now/CVE-2021-27460?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | rockwellautomation | factorytalk_assetcentre | - | - | - |