CVE-2021-32960: rockwell automation factorytalk® services platform Incorrect Authorization

Vulnerability summary

CVE-2021-32960 is a high (CVSS 8.8) Incorrect Authorization vulnerability in rockwell automation factorytalk® services platform. EPSS estimates a 2.43% chance of exploitation in the next 30 days, higher than 84.1% of scored vulnerabilities.

Timeline

1. 01-04-2022
   PublishedVulnerability first disclosed.
2. 17-04-2025
   Last modifiedVulnerability information updated.

Description

Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.

• CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
• CWE-693Protection Mechanism FailureThe product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.