PT-2023-3142 · Rockwell Automation · Rockwell Automation Armorstart St

CVE-2023-29028

·

Published

2023-05-11

·

Updated

2023-05-15

CVSS v3.1

5.9

Medium

VectorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Rockwell Automation ArmorStart ST (affected versions not specified)
Description The issue is related to insufficient input validation, which can lead to cross-site scripting (XSS) attacks. A malicious user with admin privileges and network access could potentially view user data, modify the web interface, and cause interruptions to the web page's availability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20CWE-79

Related Identifiers

BDU:2023-03240
CVE-2023-29028

Affected Products

Rockwell Automation Armorstart St