Rockwell Automation 1734 Aentr vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rockwell Automation 1734 Aentr, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3MediumCVE-2020-14504rockwell automation · 1734-aentr +2 morerockwell automation 1734-aentrThe web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings.EPSS1.27%6.1MediumCVE-2020-14502rockwell automation · 1734-aentr +2 morerockwell automation 1734-aentrThe web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface.EPSS1.01%