high8.6
CVE-2017-5143
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior.
Impact
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user without authenticating can make a directory traversal attack by accessing a specific URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Honeywell | Xl Web Ii Controller | Versions xlwebexe-1-02-08, xlwebexe-2-01-00 |