← CVE Intelligence

CVE-2020-14502

Rockwell Automation / 1734-AENTR PUBLISHED

Description (CNA)

The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface.

Affected (CNA)

Vendor / productVersions
Rockwell Automation / 1734-AENTRaffected Series B 4.001 to 4.005, and 5.011 to 5.017; affected Series C 6.011 and 6.012

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.