Lucene search
IcscertCVELIST:CVE-2020-14502HistoryFeb 24, 2022 - 6:26 p.m.
CVE-2020-14502
2022-02-2418:26:57
CWE-79
icscert
www.cve.org
web interface
1734-aentr
stored xss
remote attacker
unauthenticated
malicious script
string values
The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface.
CNA Affected
[
{
"product": "1734-AENTR",
"vendor": "Rockwell Automation",
"versions": [
{
"status": "affected",
"version": "Series B 4.001 to 4.005, and 5.011 to 5.017"
},
{
"status": "affected",
"version": "Series C 6.011 and 6.012"
}
]
}
]Related
nessus
nessus
Rockwell (CVE-2020-14502) (deprecated)
2022-04-04 00:00:00
cve
cve
CVE-2020-14502
2022-02-24 19:15:08
nvd
nvd
CVE-2020-14502
2022-02-24 19:15:08
prion
prion
Cross site scripting
2022-02-24 19:15:00
ics
ics
Rockwell Automation 1734-AENTR Series B and Series C
2021-03-04 12:00:00