CVE-2023-1841

16

FAUCET Score

CVE-2023-1841 is a Cross-site Scripting (XSS) vulnerability affecting Honeywell MPA2 Access Panels running firmware versions prior to R1.00.08.05. This medium-severity flaw (CVSS 4.8) allows authenticated attackers to inject malicious scripts via improper input neutralization, potentially leading to limited impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability. Honeywell has released firmware update R1.00.08.05 to address this issue.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< R1.00.08.05CPE matchmatch criteria	cpe:2.3:o:honeywell:mpa2_firmware::::::::

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

2.8

Impact Score

5.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.37%

Probability of exploitation in next 30 days

EPSS Percentile

29.8%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0037 is in the 41st percentile among its peer group of 4,937 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

apachepatch availablevia llm_extracted

dogukanurkerpatch availablevia llm_extracted

hppatch availablevia llm_extracted

kenticopatch availablevia llm_extracted

kongpatch availablevia llm_extracted

bentomlvendor investigatingvia llm_extracted

Vendor Advisories (6)

apachellm-apache-d12a88d314d0d996HIGH

MPA2 Web Application XSS

hpllm-hp-543ea8385e030b7bHIGH

MPA2 Web Application XSS

dogukanurkerllm-dogukanurker-477ed9d387e03572HIGH

MPA2 Web Application XSS

kenticollm-kentico-a1976eea54a70c21HIGH

MPA2 Web Application XSS

kongllm-kong-624ddacb5e37831aHIGH

MPA2 Web Application XSS

bentomlllm-bentoml-4d314040bc1f30b6HIGH

MPA2 Web Application XSS

References

buildings.honeywell.com / us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-notices

Vendor Advisory

https / /www.honeywell.com/us/en/product-security

Vendor Advisory