Rockwell Automation FactoryTalk Services Platform

An attacker who obtains a valid token could gain unauthorized access to FactoryTalk Services Platform, allowing them to view or modify industrial process configurations, plant data, and control logic without using legitimate credentials.

Organizations operating Rockwell Automation FactoryTalk Services Platform (v2.74) should be concerned, particularly those using it for plant-wide process configuration, data management, or engineering workstations. This affects manufacturing facilities, batch processors, and any facility using FactoryTalk as a central engineering or data platform.

An attacker must first obtain a valid authentication token (through social engineering, network interception, or credential compromise), then use that token to bypass normal login controls and authenticate to the FactoryTalk Services Platform. High attack complexity suggests significant prerequisites or situational factors are required, such as specific network conditions or configurations.