What’s Vulnerable › Vulnerabilities

CVE-2016-2279

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2016-03-02 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Rockwellautomation Compactlogix 1756-En2F Series A Firmware: all versions
• Rockwellautomation Compactlogix 1756-En2F Series B Firmware: all versions
• Rockwellautomation Compactlogix 1756-En2T Series A Firmware: all versions
• Rockwellautomation Compactlogix 1756-En2T Series B Firmware: all versions
• Rockwellautomation Compactlogix 1756-En2T Series C Firmware: all versions
• Rockwellautomation Compactlogix 1756-En2T Series D Firmware: through 10.007
• Rockwellautomation Compactlogix 1756-En2Tr Series A Firmware: all versions
• Rockwellautomation Compactlogix 1756-En2Tr Series B Firmware: all versions
• Rockwellautomation Compactlogix 1756-En3Tr Series A Firmware: all versions
• Rockwellautomation Compactlogix 1769-L16Er-Bb1B Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L18Er-Bb1B Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L18Erm-Bb1B Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L23E-Qb1B Firmware: through 20.018
• Rockwellautomation Compactlogix 1769-L23E-Qbfc1B Firmware: through 20.018
• Rockwellautomation Compactlogix 1769-L24Er-Qb1B Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L24Er-Qbfc1B Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L27Erm-Qbfc1B Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L30Er-Nse Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L30Er Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L30Erm Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L33Er Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L33Erm Firmware: through 27.011
• Rockwellautomation Compactlogix 1769-L36Erm Firmware: through 27.011

References

• http://www.securitytracker.com/id/1035190
• https://ics-cert.us-cert.gov/advisories/ICSA-16-061-02
• https://www.exploit-db.com/exploits/44626/
• http://www.securitytracker.com/id/1035190
• https://ics-cert.us-cert.gov/advisories/ICSA-16-061-02
• https://www.exploit-db.com/exploits/44626/

Get alerted when CVE-2016-2279 or the next vulnerability affects your stack