Rockwell Automation ArmorStart LT

Rockwell Automation's ArmorStart LT motor controllers contained two critical firmware vulnerabilities — a stored XSS flaw and an improper HTTP PUT request handler — that could allow attackers to inject malicious scripts or disrupt operations entirely. These vulnerabilities are especially dangerous in operational technology (OT) environments where availability and integrity are mission-critical. The root issue lies in insufficient input validation and improper HTTP method handling within the device firmware. Because industrial control devices often run for years without updates, unpatched firmware represents a significant attack surface in manufacturing and critical infrastructure environments. Rockwell's release of v2.002 addresses both flaws, but organizations must act quickly to apply the fix before threat actors exploit these known vulnerabilities.