NetSight
medium4.3

CVE-2015-6488

Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 al…

Impact

Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffected versions
RockwellautomationMicrologix 1100 Firmware
through 14.000
RockwellautomationMicrologix 1400 Firmware
through 15.002

Weakness classification

References