Rockwell Automation has patched nine critical vulnerabilities in its FactoryTalk AssetCentre product. The flaws have been rated with a CVSS score of 10. The vulnerabilities were discovered by industrial cybersecurity firm Claroty, ICS-CERT also published an advisory that provides details about the vulnerabilities and mitigation information. An unauthenticated, remote attacker could exploit these vulnerabilities to take control of the central server and Windows-based engineering stations communicating with the server. Finally the attacker could own a facilitys entire operational technology (OT) network and run commands on server agents.”]
Source: https://securityaffairs.co/wordpress/116391/ics-scada/rockwell-factorytalk-assetcentre-flaws.html