Skip to content
OpenAdvisories
Medium · 4.7 CVE-2023-29025 EUVD-2023-32630GHSA-grvq-7j4m-33hm

Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

Published May 11, 2023 · Updated Aug 2, 2024 · Assigned by Rockwell

Description

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

Affected products

VendorProductAffectedFixed
Rockwell Automation ArmorStart ST All —

Advisories 1

References