Rockwell Automation FactoryTalk Services Platform vulnerabilities

14 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Exploited Rockwell Automation FactoryTalk Services Platform vulnerabilities

CVE-2021-22681 — Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

CVE-2026-10714 — Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass (CVSS 8.8)
CVE-2024-21915 — Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality (CVSS 8.8)
CVE-2024-21917 — Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability (CVSS 9.1)
CVE-2023-46290 — Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability (CVSS 8.1)
CVE-2021-32960 — Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure (CVSS 8.8)
CVE-2020-14478 — IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611 (CVSS 7.1)
CVE-2020-14516 — (CVSS 10.0)
CVE-2021-22681 — Rockwell Multiple Products Insufficient Protected Credentials Vulnerability (CVSS 9.8) — exploited
CVE-2020-12033 — (CVSS 8.8)
CVE-2020-6967 — (CVSS 9.8)
CVE-2018-18981 — (CVSS 7.5)
CVE-2014-9209 — (CVSS 6.9)
CVE-2012-4714 — (CVSS 7.8)
CVE-2012-4713 — (CVSS 7.8)