Honeywell vulnerabilities
73 CVEs and advisories name Honeywell as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-13248Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface
- CVE-2026-13249Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040
- CVE-2026-17612Audit Log Exposure through Unauthorized Access
- CVE-2026-4272CVE-2026-4272 - Bluetooth Remote Execution of System Commands Vulnerability
- CVE-2026-3611Honeywell IQ4x BMS Controller Missing authentication for critical function
- CVE-2026-1670Honeywell CCTV Products Missing Authentication for Critical Function
- CVE-2021-47868WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path
- CVE-2021-47866WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path
- CVE-2025-12351Inadequate access control measure allows unauthorized users to access restricted administrative functions
- CVE-2025-3947Integer underflow during processing of short network packets in CDA FTEB responder
- CVE-2025-3946Incorrect response generation during FTEB protocol processing
- CVE-2025-2523Lack of buffer clearing before reuse may result in incorrect system behavior.
- CVE-2025-2522Lack of buffer clearing before reuse may result in incorrect system behavior.
- CVE-2025-2521Lack of indexes’ validation against buffer borders leads to remote code execution.
- CVE-2025-2520Dereferencing of an uninitialized pointer leads to denial of service.
- CVE-2025-2605Authenticated command injection
- CVE-2023-5878OneWireless command injection possible when updating firmware
- CVE-2024-6620Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability.
- CVE-2023-51605Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-51604Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-51603Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-51602Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-51601Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-51600Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-51599Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-5407Controller denial of service due to improper handling of a specially crafted message received by the controller.
- CVE-2023-5406Server communication with a controller can lead to remote code execution using a specially crafted message from the controller.
- CVE-2023-5405Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message.
- CVE-2023-5404Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure.
- CVE-2023-5403Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure