Vulnerability index

Browse CVEs

98 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Win Pak HIGH 8.8
CVE-2020-6982

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution.

Fix: after 4.7.2
Fix from $1,950 2020-03-24
Win Pak HIGH 7.2
CVE-2020-6978

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries.

Fix: 4.7.2_b1072.3.4+
Fix from $1,950 2020-03-24
Win Pak HIGH 8.8
CVE-2020-7005

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker t…

Fix: 4.7.2_b1072.3.4+
Fix from $1,950 2020-03-24
Notifier Webserver CRITICAL 9.1
CVE-2020-6972

In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from…

Fix: after 3.50
Fix from $2,300 2020-03-24
Inncom Inncontrol Firmware HIGH 7.8
CVE-2020-6968

Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files.

Fix: after 3.21
Fix from $1,950 2020-02-20
Maxpro Nvr Xe Firmware CRITICAL 9.8
CVE-2020-6959

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Buil…

Fix: after 5.6
Fix from $2,300 2020-01-22
Maxpro Nvr Xe Firmware CRITICAL 9.8
CVE-2020-6960

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Buil…

Fix: after 5.6
Fix from $2,300 2020-01-22
H4d8pr1 Firmware HIGH 7.5
CVE-2019-18230

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access…

Fix: 1.000.hw01.1.20190822 / 1.000.hw01.3.20190820+
Fix from $1,950 2019-10-31
H2w2pc1m Firmware CRITICAL 9.8
CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorder…

Mitigation only
Fix from $2,300 2019-10-31
H2w2pc1m Firmware HIGH 7.5
CVE-2019-18228

Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packe…

Mitigation only
Fix from $1,950 2019-10-31
Ip Ak2 Firmware MEDIUM 5.3
CVE-2019-13525

In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain we…

Fix: 1.04.07+
Fix from $1,600 2019-10-25
Hbd3pr2 Firmware MEDIUM 5.3
CVE-2019-13523

In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain we…

Mitigation only
Fix from $1,600 2019-09-26
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-5435

An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43…

Mitigation only
Fix from $2,300 2019-04-08
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-9186

A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.…

Mitigation only
Fix from $2,300 2019-04-08
Experion Process Knowledge System HIGH 7.5
CVE-2014-5436

A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before …

Mitigation only
Fix from $1,950 2019-04-08
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-9187

Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and a…

Mitigation only
Fix from $2,300 2019-03-25
Experion Process Knowledge System CRITICAL 9.8
CVE-2014-9189EPSS 5%

Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6,…

Mitigation only
Fix from $2,300 2019-03-25
Cn80 MEDIUM 5.8
CVE-2018-14825

On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN…

Mitigation only
Fix from $1,600 2018-09-24
Matrikonopc Explorer MEDIUM 6.1
CVE-2018-8714

Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensi…

Fix: 5.1.0.0+
Fix from $1,600 2018-05-17
Enterprise Dvr Firmware HIGH 8.1
CVE-2017-14263

Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session …

Mitigation only
Fix from $1,950 2017-09-11
Intermec Pc23 Firmware HIGH 8.8
CVE-2017-5671

Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin…

Fix: after 10.10.011406
Fix from $1,950 2017-03-29
Xl Web Ii Controller CRITICAL 9.8
CVE-2017-5139

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Any user i…

Mitigation only
Fix from $2,300 2017-02-13
Xl Web Ii Controller CRITICAL 9.8
CVE-2017-5140

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password i…

Mitigation only
Fix from $2,300 2017-02-13
Xl Web Ii Controller CRITICAL 9.1
CVE-2017-5142

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user wit…

Mitigation only
Fix from $2,300 2017-02-13
Xl Web Ii Controller HIGH 8.6
CVE-2017-5143

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user wit…

Mitigation only
Fix from $1,950 2017-02-13
Xl Web Ii Controller MEDIUM 6.0
CVE-2017-5141

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacke…

Mitigation only
Fix from $1,600 2017-02-13
Uniformance Process History Database HIGH 7.5
CVE-2016-2280

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database (PHD) R310, R320, and R321 allows remote attackers to cause a denial o…

Mitigation only
Fix from $1,950 2016-04-21
Midas Firmware HIGH 9.3
CVE-2015-7908

Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sni…

Fix: after 2.13b1
Fix from $1,950 2015-12-21
Midas Black Firmware HIGH 8.6
CVE-2015-7907

Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows…

Fix: after 2.13b1
Fix from $1,950 2015-12-21
Tuxedo Touch MEDIUM 6.8
CVE-2015-2848

Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of …

Fix: after 5.1.13.0_va
Fix from $1,600 2015-07-26