High ICSA-17-033-01 5 CVEs

Honeywell XL Web II Controller Vulnerabilities

Published Feb 2, 2017 · Updated Feb 2, 2017

Vendor: Honeywell Product: XL1000C500 XLWebExe Product: XLWeb 500 XLWebExe

Summary

Independent researcher Maxim Rupp has identified vulnerabilities in Honeywell 's XL Web II controller application. Honeywell has produced a new version to mitigate these vulnerabilities.

Vulnerabilities 5

Unscored —

CVE-2017-5139

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…

Feb 13, 2017
Unscored —

CVE-2017-5140

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…

Feb 13, 2017
Unscored —

CVE-2017-5141

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…

Feb 13, 2017
Unscored —

CVE-2017-5142

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…

Feb 13, 2017
Unscored —

CVE-2017-5143

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe…

Feb 13, 2017

Revision history

2017-02-02 #1
ICSA-17-033-01 Honeywell XL Web II Controller Vulnerabilities

References

ICS Advisory ICSA-17-033-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-033-01