Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2023-29025

Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

Description

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation ArmorStart ST

Default version status: unaffected

  • All affected

References