Rockwell Automation Factorytalk Services Platform vulnerabilities

CVE-2021-32960 [HIGH] CWE-863 CVE-2021-32960: Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enab Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they we

CVE-2023-46290 [HIGH] CWE-287 CVE-2023-46290: Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the Fac

CVE-2020-14478 [HIGH] CWE-611 CVE-2020-14478: A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly conf A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services.