CVE-2023-29024

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product

A cross site scripting vulnerability was discovered that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation of this vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Rockwell Automation	ArmorStart ST	All

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438Permissions Required, Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438Permissions Required, Vendor Advisory

Timeline

Published: May 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-290255.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciou CVE-2023-290265.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciou CVE-2023-290275.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciou CVE-2023-290285.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciou CVE-2023-290295.9A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a maliciou CVE-2023-29036.5A vulnerability classified as problematic has been found in NFine Rapid Development Platform 20230511. This affects an unknown part of the f CVE-2023-290307.1A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious CVE-2023-290317.1A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious CVE-2023-290328.1An attacker that has gained access to certain private information can use this to act as other user. Vendor: The Apache Software Foundation CVE-2023-29047.3The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the appl CVE-2023-290436.1Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed w CVE-2023-290445.4Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation