CVE-2017-5142

CVE-2017-5142 describes an improper privilege management vulnerability in Honeywell XL Web II controller XL1000C500 (versions XLWebExe-2-01-00 and prior) and XLWeb 500 (versions XLWebExe-1-02-08 and prior). This critical vulnerability, rated 9.1 CVSSv3, allows a low-privileged user to access and modify critical parameters by navigating to a specific URL, leading to high confidentiality impact and low integrity and availability impacts. While the vulnerability is publicly known and has received some media coverage, there is no evidence of active exploitation, nor are there readily available public exploit modules like Metasploit or Nuclei. Community discussion is minimal, suggesting limited widespread attention despite its critical severity.