CVE-2018-19615: XSS

Published Dec 26, 2018

Updated

Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâ??s web browser to gain access to the affected device.

Other sources

Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain access to the affected device.

— MITRE

Affected Software

2 affected components

rockwellautomation Powermonitor 1000 Firmware=1408-em3a-ent_b

rockwellautomation Powermonitor 1000

Event History

Dec 26, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2018-19615.

What is the affected software?

The affected software is the Rockwell Automation Allen-Bradley PowerMonitor 1000 with firmware version 1408-em3a-ent_b.

What is the severity of CVE-2018-19615?

The severity of CVE-2018-19615 is medium with a severity value of 6.1.

How can a remote attacker exploit this vulnerability?

A remote attacker can inject arbitrary code into a targeted user's web browser to gain access to the affected device.

Are there any references for more information?

Yes, you can find more information about CVE-2018-19615 at the following references: [link1](http://packetstormsecurity.com/files/150600/Rockwell-Automation-Allen-Bradley-PowerMonitor-1000-XSS.html), [link2](http://www.securityfocus.com/bid/106333), [link3](http://www.securityfocus.com/bid/108538).