CVE-2014-3110

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

5.34%

Published

Jul 24, 2014

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBHoneywell XL Web Controller - Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to inject arbitrary web script or HTML via invalid input.

Weaknesses (CWE)

CWE-79

Affected Products (2)

honeywell · falcon_xlweb_linux_controllervulnerable

honeywell · falcon_xlweb_xlwebexevulnerable

References (6)

http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/68838

https://www.exploit-db.com/exploits/44749/

http://ics-cert.us-cert.gov/advisories/ICSA-14-175-01

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/68838

https://www.exploit-db.com/exploits/44749/

KEV Catalog EPSS Scores Vendors All CVEs