CVE-2017-5142

Critical

Published: 13/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Honeywell XL Web II controller XL1000C500 and XLWeb 500 related to improper privilege management. A user with low privileges can access a specific URL and change system parameters.

Risk Assessment

Improper privilege management may lead to unauthorized changes in system configuration, posing a risk to the integrity and security of operations.

Recommendation

It is recommended to review and strengthen privilege management in the system to restrict access to critical parameters to authorized users.

Original NVD description (English source)

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management.