CVE-2016-2279 Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via u...
MediumCVSS 6.1
EPSS 7.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation compactlogix 1769-l16er-bb1b firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l18er-bb1b firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l18erm-bb1b firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l24er-qb1b firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l24er-qbfc1b firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l27erm-qbfc1b firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l30er firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l30erm firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l30er-nse firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l33er firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l33erm firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l36erm firmware | <= 27.011 | No fix listed |
| rockwellautomation compactlogix 1769-l23e-qb1b firmware | <= 20.018 | No fix listed |
| rockwellautomation compactlogix 1769-l23e-qbfc1b firmware | <= 20.018 | No fix listed |
| rockwellautomation compactlogix 1756-en2f series a firmware | All versions | No fix listed |
| rockwellautomation compactlogix 1756-en2f series b firmware | All versions | No fix listed |
| rockwellautomation compactlogix 1756-en2t series a firmware | All versions | No fix listed |
| rockwellautomation compactlogix 1756-en2t series b firmware | All versions | No fix listed |
| rockwellautomation compactlogix 1756-en2t series c firmware | All versions | No fix listed |
| rockwellautomation compactlogix 1756-en2t series d firmware | <= 10.007 | No fix listed |
| rockwellautomation compactlogix 1756-en2tr series a firmware | All versions | No fix listed |
| rockwellautomation compactlogix 1756-en2tr series b firmware | All versions | No fix listed |
| rockwellautomation compactlogix 1756-en3tr series a firmware | All versions | No fix listed |
References
- 1035190 broken-link third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- 44626 exploit third-party-advisory vdb-entry