CVE-2017-5142: An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb...

Security readout for executives and security teams

CVE-2017-5142 affects Honeywell XL Web II and XLWeb 500 controllers. A low-privileged user could access a specific URL and change controller parameters, creating risk of unauthorized operational changes. The provided sources do not include a CVSS score or patch details. Exposure is limited to environments running the named Honeywell controller products and versions. Risk is higher where low-privileged users can reach controller management functions or where account separation is relied on for operational safety. Treat as a targeted operational-risk issue, not a broad internet emergency based on the provided evidence. Prioritize sites using the affected controllers, especially facilities where unauthorized parameter changes could affect safety, availability, or building operations. Mitigation focus: Check Honeywell and CISA advisory guidance for supported fixes or compensating controls.; Restrict controller management access to trusted administrative networks only.; Review and minimize low-privileged accounts with controller access..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.