Honeywell XL Web II Controller Vulnerabilities

Risk Summary

Independent researcher Maxim Rupp has identified vulnerabilities in Honeywell 's XL Web II controller application. Honeywell has produced a new version to mitigate these vulnerabilities.

CVEs (5)

Remediations

• Honeywell has developed Version 3.04.05.05 to fix the vulnerabilities in the XL Web II controllers. Users are encouraged to contact the local Honeywell HBS branch to have their sites updated to the latest version.
• In the Centraline partner channel, Excel Web controllers also have been sold under the brand name “FALCON.” Users can obtain the latest versions by contacting Centraline:

Affected Vendors

Affected Products (2)