Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-grvq-7j4m-33hm

Опубликовано: 11 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

EPSS

Процентиль: 31%
0.00117
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-20
CWE-79

Связанные уязвимости

CVSS3: 4.7
nvd
больше 2 лет назад

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

CVSS3: 5.9
fstec
больше 2 лет назад

Уязвимость микропрограммного обеспечения распределённых контроллеров Rockwell Automation ArmorStart ST, позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)

EPSS

Процентиль: 31%
0.00117
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-20
CWE-79