Browse CVEs

HIGH 8.8 CVE-2022-1261 Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to … Matrikon Opc Server Mitigation only Fix from $1,9502022-05-26 CRITICAL 9.8 CVE-2021-39363 Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved. Hdzp252di Firmware Mitigation only Fix from $2,3002022-02-24 HIGH 7.5 CVE-2021-39364 Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achi… Hdzp252di Firmware Mitigation only Fix from $1,9502022-02-24 HIGH 7.5 CVE-2020-10628 ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network. Controledge Plc Firmware Mitigation only Fix from $1,9502020-06-26 HIGH 7.5 CVE-2020-10624 ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network. Controledge Plc Firmware Mitigation only Fix from $1,9502020-06-26 CRITICAL 9.8 CVE-2019-18226 Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorder… H2w2pc1m Firmware Mitigation only Fix from $2,3002019-10-31 HIGH 7.5 CVE-2019-18228 Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packe… H2w2pc1m Firmware Mitigation only Fix from $1,9502019-10-31 MEDIUM 5.3 CVE-2019-13523 In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain we… Hbd3pr2 Firmware Mitigation only Fix from $1,6002019-09-26 CRITICAL 9.8 CVE-2014-5435 An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43… Experion Process Knowledge System Mitigation only Fix from $2,3002019-04-08 CRITICAL 9.8 CVE-2014-9186 A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.… Experion Process Knowledge System Mitigation only Fix from $2,3002019-04-08 HIGH 7.5 CVE-2014-5436 A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before … Experion Process Knowledge System Mitigation only Fix from $1,9502019-04-08 CRITICAL 9.8 CVE-2014-9187 Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and a… Experion Process Knowledge System Mitigation only Fix from $2,3002019-03-25 CRITICAL 9.8 CVE-2014-9189EPSS 5% Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6,… Experion Process Knowledge System Mitigation only Fix from $2,3002019-03-25 MEDIUM 5.8 CVE-2018-14825 On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN… Cn80 Mitigation only Fix from $1,6002018-09-24 HIGH 8.1 CVE-2017-14263 Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session … Enterprise Dvr Firmware Mitigation only Fix from $1,9502017-09-11 CRITICAL 9.8 CVE-2017-5139 An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user i… Xl Web Ii Controller Mitigation only Fix from $2,3002017-02-13 CRITICAL 9.8 CVE-2017-5140 An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password i… Xl Web Ii Controller Mitigation only Fix from $2,3002017-02-13 CRITICAL 9.1 CVE-2017-5142 An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user wit… Xl Web Ii Controller Mitigation only Fix from $2,3002017-02-13 HIGH 8.6 CVE-2017-5143 An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user wit… Xl Web Ii Controller Mitigation only Fix from $1,9502017-02-13 MEDIUM 6.0 CVE-2017-5141 An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacke… Xl Web Ii Controller Mitigation only Fix from $1,6002017-02-13 HIGH 7.5 CVE-2016-2280 Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial o… Uniformance Process History Database Mitigation only Fix from $1,9502016-04-21 MEDIUM 6.8 CVE-2013-0108EPSS 27% An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1,… Enterprise Buildings Integrator Mitigation only Fix from $1,6002013-02-24 HIGH 7.5 CVE-2012-0254 Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and… Enterprise Building Manager Mitigation only Fix from $1,9502012-09-08 HIGH 9.3 CVE-2011-0331 Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbit… Scanserver Activex Control Mitigation only Fix from $1,9502011-03-22 HIGH 10.0 CVE-2007-2938EPSS 41% Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is u… Ademco Atnbaseloader100 Module No fix yet Fix from $1,9502007-05-31