security1 distinct publisher
Stored XSS in ArmorStart LT waits for the engineer who opens the device's web page
Rockwell found and reported both CVEs itself, and the only fix is firmware v2.002 on hardware wired into running machines. That puts this on a maintenance calendar rather than an incident bridge, with the web server outage the part that bites during a fault chase.
Publishers:cisa.gov
Reality
- Evidence74
- Adoption
- Insufficient
- Hype gap−8
- Incentives58
- Confidence