← Back to browse · API

CVE-2021-27472

Severity
CRITICAL
CVSS
10.0
EPSS
0.05448
Risk score
41.91
CISA KEV
No
PoC
No
Published
2022-03-23
Modified
2025-04-16
First seen
2026-08-07
Aliases
EUVD-2021-14226, GHSA-H3RX-5GGG-649J
Products
Rockwell Automation:FactoryTalk AssetCentre unspecified ≤v10.00
Sources
euvd EUVD-2021-14226

Description

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements.

References