Unrated severityNVD Advisory· Published Feb 29, 2024· Updated Aug 2, 2024

Honeywell MPA2 Web Application XSS vulnerability

CVE-2023-1841

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid Characters.This issue affects MPA2 Access Panel all version prior to R1.00.08.05.

Honeywell released firmware update package MPA2 firmware R1.00.08.05 which addresses this vulnerability. This version and all later versions correct the reported vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Honeywell/MPA2 Access Panelllm-create
Range: <R1.00.08.05
Honeywell/MPA2 Access Panelv5
Range: 0

Patches

Vulnerability mechanics

References

buildings.honeywell.com/us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-noticesmitre
https//www.honeywell.com/us/en/product-securitymitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000