CVE-2015-0984: Honeywell Excel Web Xl 1000c1000 600 I/o

High severity, CVSS 10.0. EPSS: 5.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000C500 300 I/O, XL1000C1000 600 I/O, XL1000C50U 52 I/O UUKL, XL1000C100U 104 I/O UUKL, XL1000C500U 300 I/O UUKL, and XL1000C1000U 600 I/O UUKL controllers before 2.04.01 allows remote attackers to read files under the web root, and consequently obtain administrative login access, via a crafted pathname.

Affected products

• Honeywell Excel Web Xl 1000c1000 600 I/o: up to and including 2.04.00
• Honeywell Excel Web Xl 1000c1000 600 I/o Uukl: up to and including 2.04.00
• Honeywell Excel Web Xl 1000c100 104 I/o: up to and including 2.04.00
• Honeywell Excel Web Xl 1000c100u 104 I/o Uukl: up to and including 2.04.00
• Honeywell Excel Web Xl 1000c500 300 I/o: up to and including 2.04.00
• Honeywell Excel Web Xl 1000c500 300 I/o Uukl: up to and including 2.04.00
• Honeywell Excel Web Xl 1000c50 52 I/o: up to and including 2.04.00
• Honeywell Excel Web Xl 1000c50u 52 I/o Uukl: up to and including 2.04.00

Published 2015-03-31. Last modified 2026-06-17.