CVE-2018-19615 | BDVDB-2026-110985 Detail

Description#

Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain access to the affected device.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ics-cert.us-cert.gov/advisories/ICSA-19-050-04
https://www.exploit-db.com/exploits/45928/
http://packetstormsecurity.com/files/150600/Rockwell-Automation-Allen-Bradley-PowerMonitor-1000-XSS.html
http://www.securityfocus.com/bid/106333
http://www.securityfocus.com/bid/108538

Exploit#

https://www.exploit-db.com/exploits/45928/

History#

Version 12018-12-26Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.