CVE-2014-2717

2014-07-2414:55:07

[email protected]

web.nvd.nist.gov

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.003

Percentile

70.6%

JSON

Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain administrative access by visiting the change-password page.

Affected configurations

Nvd

Node

honeywellfalcon_xlweb_linux_controllerRange≤2.04.01

honeywellfalcon_xlweb_xlwebexeRange≤2.02.11

VendorProductVersionCPE
honeywellfalcon_xlweb_linux_controller*cpe:2.3:h:honeywell:falcon_xlweb_linux_controller:*:*:*:*:*:*:*:*
honeywellfalcon_xlweb_xlwebexe*cpe:2.3:h:honeywell:falcon_xlweb_xlwebexe:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
honeywell	falcon_xlweb_linux_controller	*	cpe:2.3:h:honeywell:falcon_xlweb_linux_controller::::::::
honeywell	falcon_xlweb_xlwebexe	*	cpe:2.3:h:honeywell:falcon_xlweb_xlwebexe::::::::