CVE-2017-5142: Critical severity Honeywell XL Web II controller vulnerability
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5142?
CVE-2017-5142 is considered a high severity vulnerability due to improper privilege management allowing unauthorized access to critical parameters.
How do I fix CVE-2017-5142?
To fix CVE-2017-5142, upgrade the Honeywell XL Web II controller to a version later than XLWebExe-2-01-00 or XLWebExe-1-02-08.
What types of systems are affected by CVE-2017-5142?
CVE-2017-5142 affects Honeywell XL Web II controller versions XLWebExe-1-02-08 and earlier, as well as XLWebExe-2-01-00 and earlier.
What attack vector is used in CVE-2017-5142?
CVE-2017-5142 allows a low-privileged user to exploit the vulnerability by accessing a specific URL to change parameters.
Who is at risk due to CVE-2017-5142?
Organizations using vulnerable versions of the Honeywell XL Web II controller are at risk of unauthorized access and potential manipulation of system parameters.