CVE-2020-14502: Rockwellautomation 1734-Aentr Point I/o Dual Port Network Adaptor Series B Firmware

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface.

Affected products

• Rockwellautomation 1734-Aentr Point I/o Dual Port Network Adaptor Series B Firmware: from 4.001, up to and including 4.005; from 5.011, up to and including 5.017
• Rockwellautomation 1734-Aentr Point I/o Dual Port Network Adaptor Series C Firmware: version 6.011 only; version 6.012 only

Published 2022-02-24. Last modified 2026-06-17.