Unscored CVE-2015-6488 EUVD-2015-6429GHSA-fc49-5gv9-9p27

Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices be…

Published Oct 28, 2015 · Updated Aug 6, 2024 · Assigned by icscert

Description

Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Advisories 1

ICSA-15-300-03A Rockwell Automation Micrologix 1100 and 1400 PLC Systems Vulnerabilities (Update A) CISA ICS & IT advisories · Jun 9, 2025

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-300-03