CVE-2014-2717

Published: Jul 24, 2014Modified: May 6, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain administrative access by visiting the change-password page.

Affected (2)

Products: Honeywell: Falcon Xlweb Linux Controller, Falcon Xlweb Xlwebexe

2 products

Falcon Xlweb Linux Controller

Falcon Xlweb Xlwebexe

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Honeywell Falcon Xlweb Linux Controller	Up to 2.04.01
Honeywell Falcon Xlweb Xlwebexe	Up to 2.02.11

References (2)

http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.