ExploitGrid@exploitgrid
💀 CRITICAL Exploits Trending (all CVSS 10) ├ CVE-2021-27466 + CVE-2021-27460 · FactoryTalk AssetCentre · RCE listing live └ CVE-2021-44228 · Log4Shell · 4 more audit resources live
1000034
463 followersView on X
CVE-2021-27466(rockwellautomation / factorytalk_assetcentre)
LOWCVSS 9.8 · CRITICALSignal is active with 3 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.
0.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
- https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01
- https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01
Weakness type (CWE)
CWE-502
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- factorytalk_assetcentre
Threat summary
- 3 mentions across 1 observed day
What's happening
- 3 total mentions across 1 day
Affected systems
Vendors
Products
factorytalk_assetcentre
Deep dive
Activity timeline3 mentions / 1d
Referenced assets1 URL
Full discourse3 posts
- ExploitGrid@exploitgrid
[EXPLOIT] CVE-2021-27466, CVE-2021-27460 [CRITICAL/PoC] CVSS: 10 factorytalk-assetcentre-rce 🔗 https://exploitgrid.net/exploits/2fd4f2f0-b626-47c7-8f2d-8304b0ef9a15
1000046463 followersView on X - ExploitGrid@exploitgrid
ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2021-27466, CVE-2021-27460 (CVSS: 10) CVE-2021-44228 (CVSS: 10) Apache Softw... CVE-2021-44228 (CVSS: 10) Apache Softw... CVE-2021-44228 (CVSS: 10) Apache Softw... CVE-2021-44228 (CVSS: 10) Apache Softw... ..🧵👇
1000079463 followersView on X
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | rockwellautomation | factorytalk_assetcentre | - | - | - |