Vulnerability index

Browse CVEs

55 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Matrikon Opc Server HIGH 8.8
CVE-2022-1261

Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to …

Mitigation only
Fix from $1,950 2022-05-26
Hdzp252di Firmware CRITICAL 9.8
CVE-2021-39363

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved.

Mitigation only
Fix from $2,300 2022-02-24
Hdzp252di Firmware HIGH 7.5
CVE-2021-39364

Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achi…

Mitigation only
Fix from $1,950 2022-02-24
Controledge Plc Firmware HIGH 7.5
CVE-2020-10628

ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.

Mitigation only
Fix from $1,950 2020-06-26
Controledge Plc Firmware HIGH 7.5
CVE-2020-10624

ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.

Mitigation only
Fix from $1,950 2020-06-26
H2w2pc1m Firmware CRITICAL 9.8
CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorder…

Mitigation only
Fix from $2,300 2019-10-31
H2w2pc1m Firmware HIGH 7.5
CVE-2019-18228

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packe…

Mitigation only
Fix from $1,950 2019-10-31
Hbd3pr2 Firmware MEDIUM 5.3
CVE-2019-13523

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain we…

Mitigation only
Fix from $1,600 2019-09-26
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-5435

An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43…

Mitigation only
Fix from $2,300 2019-04-08
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-9186

A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.…

Mitigation only
Fix from $2,300 2019-04-08
Experion Process Knowledge System HIGH 7.5
CVE-2014-5436

A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before …

Mitigation only
Fix from $1,950 2019-04-08
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-9187

Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and a…

Mitigation only
Fix from $2,300 2019-03-25
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-9189EPSS 5%

Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6,…

Mitigation only
Fix from $2,300 2019-03-25
Cn80 MEDIUM 5.8
CVE-2018-14825

On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN…

Mitigation only
Fix from $1,600 2018-09-24
Enterprise Dvr Firmware HIGH 8.1
CVE-2017-14263

Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session …

Mitigation only
Fix from $1,950 2017-09-11
Xl Web Ii Controller CRITICAL 9.8
CVE-2017-5139

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user i…

Mitigation only
Fix from $2,300 2017-02-13
Xl Web Ii Controller CRITICAL 9.8
CVE-2017-5140

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password i…

Mitigation only
Fix from $2,300 2017-02-13
Xl Web Ii Controller CRITICAL 9.1
CVE-2017-5142

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user wit…

Mitigation only
Fix from $2,300 2017-02-13
Xl Web Ii Controller HIGH 8.6
CVE-2017-5143

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user wit…

Mitigation only
Fix from $1,950 2017-02-13
Xl Web Ii Controller MEDIUM 6.0
CVE-2017-5141

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacke…

Mitigation only
Fix from $1,600 2017-02-13
Uniformance Process History Database HIGH 7.5
CVE-2016-2280

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial o…

Mitigation only
Fix from $1,950 2016-04-21
Enterprise Buildings Integrator MEDIUM 6.8
CVE-2013-0108EPSS 27%

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1,…

Mitigation only
Fix from $1,600 2013-02-24
Enterprise Building Manager HIGH 7.5
CVE-2012-0254

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and…

Mitigation only
Fix from $1,950 2012-09-08
Scanserver Activex Control HIGH 9.3
CVE-2011-0331

Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbit…

Mitigation only
Fix from $1,950 2011-03-22
Ademco Atnbaseloader100 Module HIGH 10.0
CVE-2007-2938EPSS 41%

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is u…

No fix yet
Fix from $1,950 2007-05-31