Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Honeywell XL Web II Controller 权限许可和访问控制问题漏洞
Vulnerability Description
Honeywell XL Web II Controller是美国霍尼韦尔国际(Honeywell International)公司的一套基于Web主要应用于能源、制造业中的SCADA系统。 Honeywell XL Web II Controller XLWebExe-2-01-00及之前的版本和XLWeb 500 XLWebExe-1-02-08及之前的版本中存在安全漏洞。攻击者可利用该漏洞更改参数。
CVSS Information
N/A
Vulnerability Type
N/A