What’s Vulnerable › Vulnerabilities

CVE-2021-27472: Rockwell Automation FactoryTalk AssetCentre SQL Injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-23 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability exists in the RunSearch function of SearchService service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier, which may allow for the execution of remote unauthenticated arbitrary SQL statements.

Affected products

• Rockwell Automation FactoryTalk AssetCentre: through 10.00

References

• https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01
• https://idp.rockwellautomation.com/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Drockwellautomation.custhelp.com%26RelayState%3Danswers%2Fanswer_view%2Fa_id%2F1130831
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-091-01

Get alerted when CVE-2021-27472 or the next vulnerability affects your stack