Description
The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | 1734-AENTR | Series B 4.001 to 4.005, and 5.011 to 5.017, Series C 6.011 and 6.012 | — |
Advisories 1
- ICSA-21-063-01 Rockwell Automation 1734-AENTR Series B and Series C CISA ICS & IT advisories · Mar 4, 2021