The vulnerability in FactoryTalk® Services Platform involves weak authentication due to improper JWT signature validation. Specifically, the platform fails to enforce that JWT tokens use an RSA algorithm, allowing attackers to specify the "none" algorithm and create forged tokens that bypass signature checks. This flaw can be exploited by an authenticated low-privilege user to impersonate any authorized user, leading to unauthorized access and privilege escalation within the FTSP environment.

An attacker with low-privilege authenticated access can bypass JWT signature validation to impersonate any authorized user on the FTSP server. This can lead to unauthorized access to sensitive system configurations and the ability to grant permissions to other systems protected by FTSP, potentially compromising the integrity and security of the industrial control environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been provided at this time. Users should monitor Rockwell Automation advisories for updates and apply any forthcoming patches promptly.