Vulnerabilities > Rockwellautomation > Factorytalk Services Platform > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-01-31 CVE-2024-21917 Improper Verification of Cryptographic Signature vulnerability in Rockwellautomation Factorytalk Services Platform
A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory.
network
low complexity
rockwellautomation CWE-347
critical
9.1
2020-03-23 CVE-2020-6967 Deserialization of Untrusted Data vulnerability in Rockwellautomation Factorytalk Services Platform
In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCPtcp/8082, which can insecurely deserialize untrusted data.
network
low complexity
rockwellautomation CWE-502
critical
10.0