Honeywell XL Web II Controller XLWebExe-1-02-08
Approved changes feed: RSS · Atom
cpe:2.3:o:honeywell:xl_web_ii_controller:xlwebexe-1-02-08:*:*:*:*:*:*:*
part: o version: xlwebexe-1-02-08 update: *
| Vendor | Honeywell (98681534-528d-57d2-bf2a-17f1d63c09c9) |
|---|---|
| Product | Xl Web Ii Controller (799c76e0-e2b5-5c54-a964-f99113b1bbfa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-5143 |
vulnerable | 2026-06-08 05:09:39.201644 |
Details available
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal attack by accessing a specific URL.
Published: 2017-02-13T21:00:00.000Z
Updated: 2024-08-05T14:55:35.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5142 |
vulnerable | 2026-06-08 05:09:39.201305 |
Details available
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management.
Published: 2017-02-13T21:00:00.000Z
Updated: 2024-08-05T14:55:35.162Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5141 |
vulnerable | 2026-06-08 05:09:39.200955 |
Details available
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION).
Published: 2017-02-13T21:00:00.000Z
Updated: 2024-08-05T14:55:35.614Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5140 |
vulnerable | 2026-06-08 05:09:39.200572 |
Details available
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text.
Published: 2017-02-13T21:00:00.000Z
Updated: 2024-08-05T14:55:35.460Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5139 |
vulnerable | 2026-06-08 05:09:39.199087 |
Details available
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password.
Published: 2017-02-13T21:00:00.000Z
Updated: 2024-08-05T14:55:34.858Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.