EUVD-2014-3131

Malware in sbrugna...

EUVD-2014-2745

Malware in sbrugna...

Honeywell Falcon XL Web Controller Directory Traversal Vulnerability - Active Check

Honeywell Falcon XL Web Controller is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Honeywell FALCON XL Web Controller Multiple Vulnerabilities

Binary data scadaxlweb2211.nbin...

PT-2014-4882

Name of the Vulnerable Software and Affected Versions Honeywell FALCON XLWeb Linux controller devices versions 2.04.01 and earlier Honeywell FALCON XLWeb XLWebExe controller devices versions 2.02.11 and earlier Description The issue allows remote attackers to bypass authentication and obtain...

CVE-2014-2717: Undefined Security Weakness

Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain administrative access by visiting the change-password page...

PT-2014-5096

Name of the Vulnerable Software and Affected Versions Honeywell FALCON XLWeb Linux controller devices versions 2.04.01 and earlier Honeywell FALCON XLWeb XLWebExe controller devices versions 2.02.11 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML v...

CVE-2014-3110: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input...

Honeywell FALCON XLWeb Controllers Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on June 24, 2014, and is being released to the NCCIC/ICS-CERT web site. Martin Jartelius of Outpost24 has identified an authentication bypass vulnerability in Honeywell FALCON XLWeb controllers. Juan Francisco Boliv...