CVE-2023-29022 — Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

CVE-2023-29022

Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack PUBLISHED

Description (CNA)

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / ArmorStart ST	affected All

CWE

CWE-79

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438

ADP enrichment

CVE

No English description supplied.

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438

CISA-ADP

No English description supplied.

No references supplied.