Rockwellautomation Powermonitor 1000 Firmware vulnerabilities

3 CVEs affecting Rockwellautomation Powermonitor 1000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2072, published 2023-07-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-19616, published 2018-12-26. High severity, CVSS 8.1. EPSS: 30.3% chance of exploitation in the next 30 days. An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via…
CVE-2018-19615, published 2018-12-26. Medium severity, CVSS 6.1. EPSS: 3.3% chance of exploitation in the next 30 days. Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain access to the affected device.
CVE-2023-2072, published 2023-07-11. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges to access and can be…