CVE-2016-2279

moderate-risk
Published 2016-03-02

Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Do I need to act?

~
2.4% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
44626
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.1/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Compactlogix 1769-L16Er-Bb1B Firmware
Compactlogix 1769-L18Er-Bb1B Firmware
Compactlogix 1769-L18Erm-Bb1B Firmware
Compactlogix 1769-L24Er-Qbfc1B Firmware
Compactlogix 1769-L27Erm-Qbfc1B Firmware
Compactlogix 1769-L30Erm Firmware
Compactlogix 1769-L30Er-Nse Firmware
Compactlogix 1769-L36Erm Firmware
Compactlogix 1756-En2F Series B Firmware
Compactlogix 1756-En2T Series B Firmware
Compactlogix 1756-En2T Series C Firmware
Compactlogix 1756-En2T Series D Firmware
Compactlogix 1769-L24Er-Qb1B Firmware
Compactlogix 1769-L30Er Firmware
Compactlogix 1769-L33Er Firmware
Compactlogix 1769-L33Erm Firmware
Compactlogix 1769-L23E-Qb1B Firmware
Compactlogix 1769-L23E-Qbfc1B Firmware
Compactlogix 1756-En2F Series A Firmware
Compactlogix 1756-En2T Series A Firmware

Affected Vendors

Rockwellautomation

References (6)

Broken Link http://www.securitytracker.com/id/1035190
Third Party Advisory https://ics-cert.us-cert.gov/advisories/ICSA-16-061-02
Exploit https://www.exploit-db.com/exploits/44626/
Broken Link http://www.securitytracker.com/id/1035190
Third Party Advisory https://ics-cert.us-cert.gov/advisories/ICSA-16-061-02
Exploit https://www.exploit-db.com/exploits/44626/
49
/ 100
moderate-risk
Severity 23/34 · High
Exploitability 5/34 · Minimal
Exposure 21/34 · High