CVE-2023-2072

Katalog CVE

CVSS 8.8 · High EPSS 0,93%

Kerentanan Out-of-bounds Write pada rockwellautomation powermonitor 1000 firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product.  The vulnerable pages do not require privileges to access and can be injected with code by an attacker which could be used to leverage an attack on an authenticated user resulting in remote code execution and potentially the complete loss of confidentiality, integrity, and availability of the product.

Rincian

Terbit di NVD

11 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

0,93% peluang dieksploitasi; lebih tinggi dari 59,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139761 permissions required · advisory vendor