Back to Database
Status published
Unknown
CVE-2016-2279
Cross-site scripting (XSS) vulnerability in the web server in Rockwell...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* before 28.011+ allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-2279
Credits & Attribution
No credits recorded in the NVD database.
References
More from rockwellautomation
View All →CVE-2018-19616
An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000....
High
8.1
CVE-2018-19615
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker...
Medium
6.1
CVE-2018-19282
Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow...
Critical
9.8
CVE-2017-9312
Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley...
High
7.5
CVE-2016-5814
Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix...
High
8.6
Affected Vendor
rockwellautomation
View all reports →Affected Software
compactlogix 1769-l16er-bb1b firmware, compactlogix 1769-l18er-bb1b firmware, compactlogix 1769-l18erm-bb1b firmware, compactlogix 1769-l24er-qb1b firmware, compactlogix 1769-l24er-qbfc1b firmware, compactlogix 1769-l27erm-qbfc1b firmware, compactlogix 1769-l30er firmware, compactlogix 1769-l30erm firmware, compactlogix 1769-l30er-nse firmware, compactlogix 1769-l33er firmware, compactlogix 1769-l33erm firmware, compactlogix 1769-l36erm firmware, compactlogix 1769-l23e-qb1b firmware, compactlogix 1769-l23e-qbfc1b firmware, compactlogix 1756-en2f series a firmware, compactlogix 1756-en2f series b firmware, compactlogix 1756-en2t series a firmware, compactlogix 1756-en2t series b firmware, compactlogix 1756-en2t series c firmware, compactlogix 1756-en2t series d firmware, compactlogix 1756-en2tr series a firmware, compactlogix 1756-en2tr series b firmware, compactlogix 1756-en3tr series a firmware
Vulnerable Versions:
0
Timeline
Official Publish:
March 2nd, 2016
Last Modified:
June 3rd, 2026
Added to House:
July 20th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.