Skip to content
OpenAdvisories
Medium · 4.7 CVE-2023-29029 EUVD-2023-32634GHSA-xh47-8qgr-7ww7

Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

Published May 11, 2023 · Updated Jan 24, 2025 · Assigned by Rockwell

Description

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

Affected products

VendorProductAffectedFixed
Rockwell Automation ArmorStart ST All —

Advisories 1

References