CVE-2021-27470

—

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Mar 23, 2022 (Mar 23, 2022)

Modified

Jun 17, 2026

Description

A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.

Vendors: rockwellautomation
Products: factorytalk assetcentre
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news1 stories

Vulnerabilities in ICS-specific backup solution open industrial facilities to attack

Help Net SecurityFeb 1, 12:00 UTC · Feb 1, 2024Vulnerability CVE-2021-27462 CVE-2021-27466 CVE-2021-27470+6 CVEs