All packages
Honeywell XL Web II controller XL1000C500, XLWeb 500 vulnerabilities
3 known CVE vulnerabilities in Honeywell XL Web II controller XL1000C500, XLWeb 500, translated and rated.
- CVE-2017-5143High
An issue was discovered in Honeywell XL Web II, in the XL1000C500 and XLWeb 500 controllers, allowing a directory traversal attack. An unauthenticated user can access the system by visiting a specific URL.
- CVE-2017-5142Critical
An issue was discovered in Honeywell XL Web II controller XL1000C500 and XLWeb 500 related to improper privilege management. A user with low privileges can access a specific URL and change system parameters.
- CVE-2017-5139Critical
An issue exists in Honeywell XL Web II controllers, specifically XL1000C500 and XLWeb 500, related to the plaintext storage of passwords. Any user can disclose a password by accessing a specific URL.