What’s Vulnerable › Vulnerabilities

CVE-2023-29031: Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-11 · updated 2026-06-17
• Weakness: CWE-79

Description

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and modify sensitive data or make the web page unavailable. User interaction, such as a phishing attack, is required for successful exploitation of this vulnerability.

Affected products

• Rockwellautomation Armorstart St 281E Firmware: all versions
• Rockwellautomation Armorstart St 284Ee Firmware: all versions

References

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139438

Get alerted when CVE-2023-29031 or the next vulnerability affects your stack