medium4.3Public exploit code
CVE-2014-3110
Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Honeywell XL Web Controller - Cross-Site Scripting2018-05-24 · webapps · linux
Impact
Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | Falcon Xlweb Linux Controller | through 2.04.01 |
| Honeywell | Falcon Xlweb Xlwebexe | through 2.02.11 |