VULNERABILITY INTELLIGENCE

CVE-2014-2717

CVSS score7.6 HIGH

EPSS probability3.74%

CISA KEVNot currently listed

Published2014-07-24

Last modified2026-06-17

CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain administrative access by visiting the change-password page.

Primary references

cve@mitre.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource