cbcvebase.

Rockwellautomation Powermonitor 1000 Firmware vulnerabilities

2 known vulnerabilities affecting rockwellautomation/powermonitor_1000_firmware.

Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2018-19616P2HIGHCVSS 8.1PoCv1408-em3a-ent_b2018-12-26
CVE-2018-19616 [HIGH] CWE-287 CVE-2018-19616: An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated u An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via a disabled attribute for a BUTTON element.
nvd
CVE-2018-19615P4MEDIUMCVSS 6.1v1408-em3a-ent_b2018-12-26
CVE-2018-19615 [MEDIUM] CWE-79 CVE-2018-19615: Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arb Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted user’s web browser to gain access to the affected device.
nvd
Rockwellautomation Powermonitor 1000 Firmware vulnerabilities | cvebase