Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS remoting services. This vulnerability may allow a remote, unauthenticated attacker to modify sensitive data in FactoryTalk AssetCentre.
The product invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Factorytalk_assetcentre | Rockwellautomation | * | 10.00 (including) |