CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Privilege Management
Summary: an issue was discovered in honeywell xl web ii controller xl1000c500 xlwebexe-2-01-00 and prior, and xlweb 500 xlwebexe-1-02-08 and prior. a user with low privileges is able to open and change the parameters by accessing a specific url because of improper privilege management.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-02-13
Last Modified Date: 2019-10-03