CVE-2014-3110: XSS
Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3110?
CVE-2014-3110 is classified as a medium severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2014-3110?
To remediate CVE-2014-3110, upgrade the affected Honeywell FALCON XLWeb Linux controller or XLWebExe controller to a version later than 2.04.01 or 2.02.11 respectively.
What types of attacks are possible with CVE-2014-3110?
CVE-2014-3110 could allow remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.
Which Honeywell products are affected by CVE-2014-3110?
CVE-2014-3110 affects Honeywell FALCON XLWeb Linux controller devices version 2.04.01 and earlier, and FALCON XLWeb XLWebExe controller devices version 2.02.11 and earlier.
When was CVE-2014-3110 reported?
CVE-2014-3110 was reported in 2014, highlighting vulnerabilities in multiple Honeywell products.