Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceCVE-2021-27474

CVE-2021-27474

CRITICAL10.0

Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function

Published Mar 23, 2022

Modified 1 years ago

Details

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.

References

https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831

https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01

https://www.cve.org/CVERecord?id=CVE-2021-27474

CVSS Analysis

CVSS v3.1

10.0

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

HighA:H

10/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedMar 23, 2022

ModifiedApr 16, 2025

CVE-2021-27474 | Mondoo Vulnerability Intelligence