CVE-2024-21915

EUVD-2024-19521
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9 CRITICAL
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
rockwellautomationfactorytalk_services_platform
𝑥
< 2.74
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
rockwellautomationfactorytalk_services_platform
𝑥
< 2.74
ADP
Common Weakness Enumeration
References
https://www.rockwellautomation.com/en-us/support/advisory.SD1662.html
https://www.rockwellautomation.com/en-us/support/advisory.SD1662.html