CVE-2021-27474

Critical

Published: 23 March 2022

Published

23 March 2022

Modified

21 November 2024

KEV Added

—

Patch

—

CVSS Score v3.1 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

EPSS Score 0.0009 26.2th percentile

Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-27474 is a critical-severity Use of Potentially Dangerous Function (CWE-676) vulnerability in Rockwellautomation Factorytalk Assetcentre. Its CVSS base score is 10.0 (Critical).

Operationally, ranked at the 26.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2021-14228

Vulnerability details

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.

CWE(s): CWE-676 NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

rockwellautomation

factorytalk assetcentre

≤ 10.00

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References

https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
Permissions Required, Vendor Advisory · ics-cert@hq.dhs.gov
https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01
Third Party Advisory, US Government Resource · ics-cert@hq.dhs.gov
https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
Permissions Required, Vendor Advisory · af854a3a-2127-422b-91ae-364da2661108
https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01
Third Party Advisory, US Government Resource · af854a3a-2127-422b-91ae-364da2661108