CVE:CVE-2016-2279
CNNVD:CNNVD-201603-003
Rockwell Automation Allen-Bradley CompactLogix是美国罗克韦尔（Rockwell Automation）公司的一套基于Web的SCADA系统。1769-L16ER-BB1B等都是使用在其中的控制器。
Rockwell Automation Allen-Bradley CompactLogix 28.011+之前1769-L*版本的Web服务器中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade rockwellautomation compactlogix_1769-l16er-bb1b_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l18er-bb1b_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l18erm-bb1b_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l24er-qb1b_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l24er-qbfc1b_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l27erm-qbfc1b_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l30er_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l30erm_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l30er-nse_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l33er_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l33erm_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l36erm_firmware to a higher version than 27.011,and avoid the version (,27.011]; Upgrade rockwellautomation compactlogix_1769-l23e-qb1b_firmware to a higher version than 20.018,and avoid the version (,20.018]; Upgrade rockwellautomation compactlogix_1769-l23e-qbfc1b_firmware to a higher version than 20.018,and avoid the version (,20.018]; Upgrade rockwellautomation compactlogix_1756-en2f_series_a_firmware to a higher version than *; Upgrade rockwellautomation compactlogix_1756-en2f_series_b_firmware to a higher version than *; Upgrade rockwellautomation compactlogix_1756-en2t_series_a_firmware to a higher version than *; Upgrade rockwellautomation compactlogix_1756-en2t_series_b_firmware to a higher version than *; Upgrade rockwellautomation compactlogix_1756-en2t_series_c_firmware to a higher version than *; Upgrade rockwellautomation compactlogix_1756-en2t_series_d_firmware to a higher version than 10.007,and avoid the version (,10.007]; Upgrade rockwellautomation compactlogix_1756-en2tr_series_a_firmware to a higher version than *; Upgrade rockwellautomation compactlogix_1756-en2tr_series_b_firmware to a higher version than *; Upgrade rockwellautomation compactlogix_1756-en3tr_series_a_firmware to a higher version than *