Skip to content
OpenAdvisories
Critical ICSA-23-192-01 1 CVE

Rockwell Automation Enhanced HIM

Published Jul 11, 2023 · Updated Jul 11, 2023

Vendor: Rockwell Automation Product: Enhanced HIM

Summary

Successful exploitation of this vulnerability could lead to sensitive information disclosure and full remote access to the affected products.

Vulnerabilities 1

  • Critical 9.6
    CVE-2023-2746

    Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery Attack

    The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) …

    Rockwell Automation Enhanced HIM ICS / OT

Revision history

  1. #1

    Initial Publication

References