Browse CVEs

MEDIUM 6.5 CVE-2023-51605 Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to … Saia Pg5 Controls Suite Mitigation only Fix from $1,6002024-05-03 HIGH 8.8 CVE-2023-51599 Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… Saia Pg5 Controls Suite Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2023-51603 Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacker… Saia Pg5 Controls Suite Mitigation only Fix from $1,9502024-05-03 MEDIUM 6.5 CVE-2023-51600 Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to … Saia Pg5 Controls Suite Mitigation only Fix from $1,6002024-05-03 MEDIUM 6.5 CVE-2023-51601 Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to … Saia Pg5 Controls Suite Mitigation only Fix from $1,6002024-05-03 MEDIUM 6.5 CVE-2023-51602 Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to … Saia Pg5 Controls Suite Mitigation only Fix from $1,6002024-05-03 MEDIUM 6.5 CVE-2023-51604 Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to … Saia Pg5 Controls Suite Mitigation only Fix from $1,6002024-05-03 MEDIUM 5.3 CVE-2023-5390 An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlE… Controledge Unit Operations Controller Firmware Mitigation only Fix from $1,6002024-01-31 HIGH 7.5 CVE-2023-5389 An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and Con… Controledge Unit Operations Controller Firmware Mitigation only Fix from $1,9502024-01-30 HIGH 7.8 CVE-2023-6179 Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) attacker cou… Prowatch Mitigation only Fix from $1,9502023-11-17 CRITICAL 9.8 CVE-2023-3710EPSS 33% Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 … Pm43 Firmware Mitigation only Fix from $2,3002023-09-12 HIGH 8.8 CVE-2023-3711 Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction… Pm43 Firmware Mitigation only Fix from $1,9502023-09-12 HIGH 7.8 CVE-2023-3712 Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escala… Pm43 Firmware Mitigation only Fix from $1,9502023-09-12 CRITICAL 9.8 CVE-2023-3243 ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions. The hash is also a poorly salt… Alerton Bcm Web Firmware Mitigation only Fix from $2,3002023-06-28 HIGH 7.5 CVE-2022-4240 Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless vers… Onewireless Network Wireless Device Manager Firmware Mitigation only Fix from $1,9502023-05-30 MEDIUM 6.8 CVE-2022-46361 An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system com… Onewireless Network Wireless Device Manager Firmware Mitigation only Fix from $1,6002023-05-30 MEDIUM 6.5 CVE-2022-43485 Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This … Onewireless Network Wireless Device Manager Firmware Mitigation only Fix from $1,6002023-05-30 HIGH 7.5 CVE-2021-38399 Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauth… C200 Firmware Mitigation only Fix from $1,9502022-10-28 CRITICAL 10.0 CVE-2021-38397 Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely ex… C200 Firmware Mitigation only Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38395 Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allo… C200 Firmware Mitigation only Fix from $2,3002022-10-28 HIGH 7.8 CVE-2022-2332 A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment. Softmaster Mitigation only Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-2333 If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster… Softmaster Mitigation only Fix from $1,9502022-09-16 MEDIUM 6.5 CVE-2022-30312 The Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive Information. According to FSCT-2022-0050, there is a Tre… Trend Iq412 Firmware Mitigation only Fix from $1,6002022-09-07 CRITICAL 9.8 CVE-2022-30318 Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials… Controledge Plc Firmware Mitigation only Fix from $2,3002022-08-31 CRITICAL 9.1 CVE-2022-30317 Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0055, there is a Honeywell Experi… Experion Lx Firmware Mitigation only Fix from $2,3002022-08-31 CRITICAL 9.8 CVE-2022-30315 Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0053… Safety Manager Firmware Mitigation only Fix from $2,3002022-07-28 HIGH 8.1 CVE-2022-30319 Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls (SBC) … Saia Pg5 Controls Suite Mitigation only Fix from $1,9502022-07-28 MEDIUM 6.8 CVE-2022-30316 Honeywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0054, there is a Honeywell Expe… Safety Manager Firmware No fix yet Fix from $1,6002022-07-28 HIGH 7.5 CVE-2022-30313 Honeywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0051, there is a … Safety Manager Firmware Mitigation only Fix from $1,9502022-07-28 MEDIUM 6.5 CVE-2022-30245 Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored… Alerton Compass Mitigation only Fix from $1,6002022-07-15