Honeywell Falcon Xlweb Linux Controller vulnerabilities

2 CVEs affecting Honeywell Falcon Xlweb Linux Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3110, published 2014-07-24.

More from Honeywell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3110, published 2014-07-24. Medium severity, CVSS 4.3. EPSS: 5.3% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow…
• CVE-2014-2717, published 2014-07-24. High severity, CVSS 7.6. EPSS: 3.7% chance of exploitation in the next 30 days. Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain…