Description
A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in
which an unexpected return value from the authentication routine is
later on processed as a legitimate value, resulting in an authentication
bypass.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Copeland | Copeland XWEB 300D PRO | ≤ 1.12.1 | — |
| Copeland | Copeland XWEB 500D PRO | ≤ 1.12.1 | — |
| Copeland | Copeland XWEB 500B PRO | ≤ 1.12.1 | — |
Advisories 1
- ICSA-26-057-10 Copeland XWEB and XWEB Pro CISA ICS & IT advisories · Feb 26, 2026