Honeywell XL Web Controller Directory Traversal Vulnerability

🗓️ 18 Dec 2015 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 143 Views

Honeywell XL Web Controller has directory traversal vulnerability allowing remote attackers to gain full admin acces

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Honeywell Excel Web XL1000C50 File Read Privilege Escalation	8 Feb 201600:00	–	bdu_fstec
CNVD	Honeywell XL Web Controller Directory Traversal Vulnerability	19 Mar 201500:00	–	cnvd
CVE	CVE-2015-0984	31 Mar 201501:00	–	cve
Cvelist	CVE-2015-0984	31 Mar 201501:00	–	cvelist
EUVD	EUVD-2015-0992	7 Oct 202500:30	–	euvd
NVD	CVE-2015-0984	31 Mar 201501:59	–	nvd
OpenVAS	Honeywell Falcon XL Web Controller Directory Traversal Vulnerability - Active Check	27 Apr 201500:00	–	openvas
Packet Storm	Honeywell XLWEB SCADA Path Traversal	23 Apr 201500:00	–	packetstorm
Prion	Directory traversal	31 Mar 201501:59	–	prion
Positive Technologies	PT-2015-3091	31 Mar 201500:00	–	ptsecurity

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2015/icsa-15-076-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-15-076-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

18 Dec 2015 07:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 210

EPSS0.05612

honeywell xl web controller directory traversal remote exploitation administrative access security update network security