Administrator escalation via hard-coded cookie key

Privilege escalation in Rockwell Automation FactoryTalk System Services 6.20 and earlier allows local users to gain database administrator rights. The service generates administrator cookies with a hard-coded cryptographic key, allowing attacker-generated cookies to be accepted as administrative. A local authenticated non-admin account and later policy deployment by a legitimate user are required; malicious database changes then reach deployed security policy models.