// For flags

CVE-2023-29025

Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

Severity Score

5.9
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
Low
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2023-03-29 CVE Reserved
  • 2023-05-11 CVE Published
  • 2024-06-12 EPSS Updated
  • 2024-08-02 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
  • CAPEC-63: Cross-Site Scripting (XSS)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Rockwellautomation
Search vendor "Rockwellautomation"
Armorstart St 284ee Firmware
Search vendor "Rockwellautomation" for product "Armorstart St 284ee Firmware"
--
Affected
in Rockwellautomation
Search vendor "Rockwellautomation"
Armorstart St 284ee
Search vendor "Rockwellautomation" for product "Armorstart St 284ee"
--
Safe
Rockwellautomation
Search vendor "Rockwellautomation"
Armorstart St 281e Firmware
Search vendor "Rockwellautomation" for product "Armorstart St 281e Firmware"
--
Affected
in Rockwellautomation
Search vendor "Rockwellautomation"
Armorstart St 281e
Search vendor "Rockwellautomation" for product "Armorstart St 281e"
--
Safe