Known vulnerabilities in FactoryTalk AssetCentre

Vendor: Rockwell Automation
Software: FactoryTalk AssetCentre
Software CPE: cpe:2.3:a:rockwell_automation:factorytalk_assetcentre:*:*:*:*:*:*:*:*
Website: https://www.rockwellautomation.com/
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FactoryTalk AssetCentre FactoryTalk AssetCentre is affected by 12 known vulnerabilities: 10 high, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103472 - Insufficiently Protected Credentials
CVE-2025-0498		 CWE-522 Low
No
No
 15.00.001 31.01.2025 SB2025013112
#VU103471 - Insufficiently Protected Credentials
CVE-2025-0497		 CWE-522 Low
No
No
 15.00.001 31.01.2025 SB2025013112
#VU103470 - Inadequate Encryption Strength
CVE-2025-0477		 CWE-326 High
No
No
 15.00.001 31.01.2025 SB2025013112
#VU51928 - Deserialization of Untrusted Data
CVE-2021-27460		 CWE-502 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51927 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-27464		 CWE-89 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51926 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-27468		 CWE-89 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51925 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-27472		 CWE-89 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51924 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-27476		 CWE-78 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51923 - Use of Potentially Dangerous Function
CVE-2021-27474		 CWE-676 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51922 - Deserialization of Untrusted Data
CVE-2021-27470		 CWE-502 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51921 - Deserialization of Untrusted Data
CVE-2021-27466		 CWE-502 High
No
No
 11.00 06.04.2021 SB2021040602
#VU51920 - Deserialization of Untrusted Data
CVE-2021-27462		 CWE-502 High
No
No
 11.00 06.04.2021 SB2021040602