XSS in Honeywell Falcon Xlweb Linux Controller
CVE-2014-3110
Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.053 (91.8th percentile) — read the EPSS interpretation.
Affected products
- Honeywell Falcon_xlweb_linux_controller
- Honeywell Falcon_xlweb_xlwebexe
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_BID)