FactoryTalk® Service Platform vulnerabilities

2 known vulnerabilities in FactoryTalk® Service Platform from Rockwell Automation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FactoryTalk® Service Platform: Incorrect Permission Assignment for Critical Resource

  CVE-2024-21915Feb 16, 2024Rockwell Automation

  A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A

• 9.1 Critical severity

  FactoryTalk® Service Platform: Improper Verification of Cryptographic Signature

  CVE-2024-21917Jan 31, 2024Rockwell Automation

  A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service to