PT-2017-16339
CVE-2017-5143
·
تاريخ النشر
2017-02-13
·
تاريخ التحديث
2017-02-16
الوصف من
CVSS 3.1
8.6
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Honeywell XL Web II controller versions XL1000C500 XLWebExe-2-01-00 and prior
Honeywell XLWeb 500 versions XLWebExe-1-02-08 and prior
Description
A directory traversal attack can be made by accessing a specific URL without authenticating.
Recommendations
For Honeywell XL Web II controller versions XL1000C500 XLWebExe-2-01-00 and prior, restrict access to the specific URL that allows directory traversal attacks until a patch is available.
For Honeywell XLWeb 500 versions XLWebExe-1-02-08 and prior, restrict access to the specific URL that allows directory traversal attacks until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾