A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product
that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.
References
Link | Resource |
---|---|
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
History
15 May 2023, 17:43
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-79 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
CPE | cpe:2.3:h:rockwellautomation:armorstart_st_281e:-:*:*:*:*:*:*:* cpe:2.3:o:rockwellautomation:armorstart_st_284ee_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:rockwellautomation:armorstart_st_281e_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:rockwellautomation:armorstart_st_284ee:-:*:*:*:*:*:*:* |
|
References | (MISC) https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438 - Vendor Advisory |
11 May 2023, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-05-11 18:15
Updated : 2024-02-04 23:37
NVD link : CVE-2023-29022
Mitre link : CVE-2023-29022
CVE.ORG link : CVE-2023-29022
JSON object : View
Products Affected
rockwellautomation
- armorstart_st_284ee_firmware
- armorstart_st_281e_firmware
- armorstart_st_284ee
- armorstart_st_281e
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')