CVE-2024-21917
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-21917 is a vulnerability found in Rockwell Automation FactoryTalk® Service Platform. It allows a malicious user to obtain the service token and use it for authentication on another FTSP directory due to the lack of digital signing between the FTSP service token and directory. This vulnerability affects multiple products, including ioaWmB, ioaWmA, ioaWmC, ioaWl7, ioaWl6, ioaWl9, ioaWl8, ioaWl_, and ioaWl-. The potential danger is that an attacker could retrieve user information and modify settings without any authentication. To remediate this issue, organizations should apply patches or updates provided by Rockwell Automation as soon as they become available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions