CVE Catalog
CVE-2017-5140
CriticalSummary
An issue was discovered in Honeywell XL Web II controller (XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior) related to storing passwords in clear text.
Risk Assessment
Storing passwords in plain text poses a serious security risk, allowing unauthorized individuals to gain access to the system.
Recommendation
It is recommended to update the software to the latest version and implement password encryption mechanisms.
Original NVD description (English source)
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text.