Rockwell Automation Factorytalk® Service Platform vulnerabilities
2 vulnerabilities
Known vulnerabilities in Rockwell Automation Factorytalk® Service Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-21917rockwell automationfactorytalk® service platform+1
EPSS score0.86%
A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a malicious user could potentially retrieve user information and modify settings without any authentication.CVE-2024-21915rockwell automationfactorytalk® service platform+1EPSS score0.99%
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable.