medium4.7
CVE-2023-29028
A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin pri…
Impact
A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Armorstart St 284ee Firmware | All versions |
| Rockwellautomation | Armorstart St 281e Firmware | All versions |