[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKuhTEo9CbYs3APi4s4bge68Ar2BchiSiE9bvLRUeYLs":3,"g5a-risk:CVE-2021-32960":134},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":28,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":57,"references":58,"referencesCount":76,"weaknesses":77,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":28,"otxData":28,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":130,"notableEvents":131},"CVE-2021-32960","What is CVE-2021-32960?","Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security policies based on the computer name. If successfully exploited, this may allow an attacker to have the same privileges as if they were logged on to the client machine.","Rockwell Automation FactoryTalk Services Platform v6.11 and earlier, if FactoryTalk Security is enabled and deployed contains a vulnerability that may allow ...","2022-04-01T23:15:09.817","2025-04-17T16:15:23.433",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":38,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"ics-cert@hq.dhs.gov","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","LOW","NONE","CHANGED",8.5,null,1.8,6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":36,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":24,"PrivilegesRequired":24,"UserInteraction":25,"Scope":35,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"UNCHANGED",2.8,5.9,[39],{"Source":32,"Type":33,"CVSSData":40,"BaseSeverity":43,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":28,"ObtainAllPrivilege":28,"ObtainUserPrivilege":28,"ObtainOtherPrivilege":28,"UserInteractionRequired":28},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":43,"Authentication":44,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":30,"BaseSeverity":28,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","MEDIUM","SINGLE","PARTIAL",6.8,6.4,0.02433,[48,48,48,48,48,48,48],"High",[52],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"rockwellautomation","factorytalk_services_platform","*","cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*",1,[59,65,72,74],{"url":60,"source":61,"tags":62},"https:\u002F\u002Frockwellautomation.custhelp.com\u002Fapp\u002Fanswers\u002Fanswer_view\u002Fa_id\u002F1131785","Custhelp",[63,64],"Permissions Required","Vendor Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fics\u002Fadvisories\u002Ficsa-21-161-01","CISA",[69,70,71],"Mitigation","Third Party Advisory","US Government Resource",{"url":60,"source":61,"tags":73},[63,64],{"url":66,"source":67,"tags":75},[69,70,71],4,[78,86],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",{"id":87,"name":88,"description":89,"extendedDescription":90,"status":91,"abstraction":92,"structure":85},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar",2,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2021-32960? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-32960, a high severity cyber security vulnerability from 2022. Rockwell Automation FactoryTalk Services Platform v6.11 and...","CVE-2021-32960, CVE-2021-32960 vulnerability, CVE-2021-32960 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, rockwellautomation security, factorytalk_services_platform vulnerability","\u002Fwhat-is\u002Fcve-2021-32960",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-32960","Cybersecurity","CVE-2021-32960, CVE-2021-32960 vulnerability, CVE-2021-32960 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":28,"Negate":28,"Nodes":123},[124],{"Operator":125,"Negate":28,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":128,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":129},"2B2D37A3-D26B-4C82-A090-49598EB21429","6.11.00",[],[],{"lastModified":11,"cacheTime":133,"version":41},1792333019945,{"score":135,"band":136,"action":137,"scoredAt":138},47,"Medium","Plan remediation","2026-10-16T06:54:01.797431+00:00"]