7 matches found
CVE-2017-5141
The CVE-2017-5141 issue affects Honeywell XL Web II controllers: XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. The vulnerability allows an attacker to establish a new user session without invalidating an existing session identifier, enabling session fixation and...
CVE-2017-5140
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text...
PT-2017-16335
Name of the Vulnerable Software and Affected Versions Honeywell XL Web II controller XL1000C500 versions XLWebExe-2-01-00 and prior Honeywell XLWeb 500 versions XLWebExe-1-02-08 and prior Description The issue allows any user to disclose a password by accessing a specific URL due to plaintext...
PT-2017-16338
Name of the Vulnerable Software and Affected Versions Honeywell XL Web II controller XL1000C500 versions XLWebExe-2-01-00 and prior Honeywell XLWeb 500 versions XLWebExe-1-02-08 and prior Description The issue is related to improper privilege management, allowing a user with low privileges to...
PT-2017-16337
Name of the Vulnerable Software and Affected Versions Honeywell XL Web II controller XL1000C500 versions XLWebExe-2-01-00 and prior Honeywell XLWeb 500 versions XLWebExe-1-02-08 and prior Description An issue allows an attacker to establish a new user session without invalidating any existing...
Directory traversal
Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000C500 300 I/O, XL1000C1000 600 I/O, XL1000C50U 52 I/O UUKL, XL1000C100U 104 I/O UUKL, XL1000C500U 300 I/O UUKL, and XL1000C1000U 600 I/O UUKL controllers before 2.04.01 allows...
PT-2015-3091
Name of the Vulnerable Software and Affected Versions Honeywell Excel Web XL1000C50 52 I/O versions prior to 2.04.01 Honeywell Excel Web XL1000C100 104 I/O versions prior to 2.04.01 Honeywell Excel Web XL1000C500 300 I/O versions prior to 2.04.01 Honeywell Excel Web XL1000C1000 600 I/O versions...