CVE-2021-27466: Critical RCE in FactoryTalk AssetCentre

CVE-2021-27466 is a deserialization vulnerability in the ArchiveService.rem service of Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier. An unauthenticated remote attacker can send malicious serialized data to the service, causing arbitrary command execution on the system. It impacts industrial environments and critical infrastructures relying on this asset management solution.

With a CVSS score of 10.0, the vulnerability is classified at the highest criticality level. Publicly disclosed on March 23, 2022 through NVD, a research proof-of-concept exists today. The affected service (ArchiveService.rem) requires no authentication for access, amplifying exploitation risk on exposed systems.

Security teams and administrators must immediately verify their asset inventory to identify FactoryTalk AssetCentre installations. Check the running version and compare it against v10.00 and earlier. Consult official Rockwell Automation security advisories for patch availability or security updates. In the meantime, implement network access controls to restrict exposure of the ArchiveService.rem service to untrusted networks.