{"schemaVersion":3,"id":"CVE-2021-32960","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.","dates":{"published":"2022-04-01T22:17:11.000Z","modified":"2025-04-17T15:51:28.307Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6,"severity":"medium","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02433,"percentile":0.84117,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.02433},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02433,"percentile":0.84117}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02433,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02433,"percentile":0.84117}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-863","name":"Incorrect Authorization","description":"The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/863.html"},{"id":"CWE-693","name":"Protection Mechanism Failure","description":"The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","type":"weakness","status":"Draft","abstraction":"Pillar","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/693.html"}],"affected":[{"vendor":"rockwell automation","product":"factorytalk® services platform","name":"FactoryTalk® Services Platform","label":"factorytalk® services platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 6.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 6.11","eol":null,"hubHref":"/vendor/rockwell_automation/factorytalk_services_platform"},{"vendor":"rockwellautomation","product":"factorytalk_services_platform","name":"factorytalk services platform","label":"factorytalk_services_platform","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.11.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6.11.00","eol":null,"hubHref":"/vendor/rockwellautomation/factorytalk_services_platform"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-01","label":"www.cisa.gov/uscert/ics/advisories/icsa-21-161-01","hostname":"www.cisa.gov","tags":["X Refsource CONFIRM","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131785","label":"rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131785","hostname":"rockwellautomation.custhelp.com","tags":["X Refsource CONFIRM","Permissions Required","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-04-01T22:17:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-04-17T15:51:28.307Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T21:40:39.235Z","stale":false,"partial":false}}