Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v95f-5m3h-qqw7

Опубликовано: 11 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

EPSS

Процентиль: 29%
0.00106
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.7
nvd
больше 2 лет назад

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause interruptions to the availability of the web page.

CVSS3: 5.9
fstec
больше 2 лет назад

Уязвимость микропрограммного обеспечения распределённых контроллеров Rockwell Automation ArmorStart ST, связанная с недостаточной проверкой входных данных, позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)

EPSS

Процентиль: 29%
0.00106
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79