medium6.1Public exploit code
CVE-2016-2279
Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rockwell Scada System 27.011 - Cross-Site Scripting2018-05-16 · webapps · windows
Impact
Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Compactlogix 1769-L16er-Bb1b Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L18er-Bb1b Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L18erm-Bb1b Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L24er-Qb1b Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L24er-Qbfc1b Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L27erm-Qbfc1b Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L30er Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L30erm Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L30er-Nse Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L33er Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L33erm Firmware | through 27.011 |
| Rockwellautomation | Compactlogix 1769-L36erm Firmware | through 27.011 |