medium5.5
CVE-2023-29024
A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that cou…
Impact
A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation of this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Armorstart St 284ee Firmware | All versions |
| Rockwellautomation | Armorstart St 281e Firmware | All versions |