CVE-2021-27466

Severity

CRITICAL

CVSS

10.0

EPSS

0.03886

Risk score

41.36

CISA KEV

PoC

Published

2022-03-23

Modified

2025-04-16

First seen

2026-08-07

Aliases

EUVD-2021-14220, GHSA-9R5X-CRJW-6GHJ

Products

Rockwell Automation:FactoryTalk AssetCentre unspecified ≤v10.00

Sources

euvd EUVD-2021-14220

Description

A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in FactoryTalk AssetCentre.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-14220
https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01
https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831