CVE-2017-5139: Critical severity Honeywell XL Web II controller vulnerability
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user is able to disclose a password by accessing a specific URL, because of Plaintext Storage of a Password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5139?
CVE-2017-5139 is classified as a high severity vulnerability due to the exposure of passwords.
How do I fix CVE-2017-5139?
To mitigate CVE-2017-5139, users should upgrade to the latest version of the Honeywell XL Web II controller software.
What types of systems are affected by CVE-2017-5139?
CVE-2017-5139 affects Honeywell XL Web II controllers, specifically versions XLWebExe-1-02-08 and earlier, as well as XLWebExe-2-01-00 and earlier.
What is the nature of the vulnerability in CVE-2017-5139?
The vulnerability in CVE-2017-5139 arises from the plaintext storage of passwords, allowing unauthorized users to disclose them.
Who can be impacted by CVE-2017-5139?
Any user with access to the specific URL can be impacted by CVE-2017-5139, leading to potential unauthorized access.