Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-2072: PowerMonitor™ 1000 – Cross-Site Scripting Vulnerability

The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges to access and can be injected with code by an attacker which could be used to leverage an attack on an authenticated user resulting in remote code execution and potentially the complete loss of confidentiality, integrity, and availability of the product.

CVE
#xss#vulnerability#web#rce#auth

Skip Navigation

menu

  • Support Center
  • Get Support Chat & Submit a Question Phone Support Holiday Schedule
  • Training & Webinars
  • Online Forum
  • Customer Care Customer Care Overview Phone Support Holiday Schedule

Sign In

Quickly log in or create an account using an existing service

Yahoo

What will happen: When you click on this button you will be taken to Yahoo. Once you log in, Yahoo will verify you and send you back here where you’ll be logged in!

Log In or Create an AccountOpens new dialog

Please log in to continue, Username Password

Email Address *

Username *

Password

Re-enter a value for the field ‘Password’

Must match Password

First Name *

Last Name *

Forgot your username or password?

The page will refresh upon submission. Any pending input will be lost.

Current product hierarchy

  1. Automation Control
  2. Energy Monitoring
  3. PowerMonitor
  4. 1408 PowerMonitor 1000

ID: PN1631 | Access Levels: Everyone

Search

Did you mean:

Published DatePublished Date 07/11/2023

Login Required to View Full Answer Content

Please use the ‘Sign In’ button above

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907