Rockwellautomation Factorytalk Assetcentre — known CVE vulnerabilities

Every CVE whose affected-product data names Rockwellautomation Factorytalk Assetcentre, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2021-27460 — CVSS 10.0 (critical): Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data…
• CVE-2021-27462 — CVSS 10.0 (critical): A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier…
• CVE-2021-27464 — CVSS 10.0 (critical): The ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper…
• CVE-2021-27466 — CVSS 10.0 (critical): A deserialization vulnerability exists in how the ArchiveService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and…
• CVE-2021-27468 — CVSS 10.0 (critical): The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper…
• CVE-2021-27470 — CVSS 10.0 (critical): A deserialization vulnerability exists in how the LogService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier…
• CVE-2021-27472 — CVSS 10.0 (critical): A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and…
• CVE-2021-27474 — CVSS 10.0 (critical): Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services…
• CVE-2021-27476 — CVSS 10.0 (critical): A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This…
• CVE-2025-0477 — CVSS 9.8 (critical): An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability…
• CVE-2025-0497 — CVSS 9.8 (critical): A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The…
• CVE-2025-0498 — CVSS 9.8 (critical): A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The…