High severity8.1NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026

CVE-2023-1841

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid Characters.This issue affects MPA2 Access Panel all version prior to R1.00.08.05.

Honeywell released firmware update package MPA2 firmware R1.00.08.05 which addresses this vulnerability. This version and all later versions correct the reported vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Honeywell/MPA2 Access Panelllm-fuzzy2 versions
<R1.00.08.05+ 1 more
- (no CPE)range: <R1.00.08.05
- (no CPE)range: 0
Honeywell/Mpa2 Firmware
cpe:2.3:o:honeywell:mpa2_firmware:*:*:*:*:*:*:*:*
Range: <R1.00.08.05

Patches

Vulnerability mechanics

References

buildings.honeywell.com/us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-noticesnvdVendor Advisory
https//www.honeywell.com/us/en/product-securitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000