# cve.now: Honeywell

The newest entries naming Honeywell as an affected vendor (up to 200), of 73 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-13248](https://cve.now/CVE-2026-13248.md): Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface (CVSS 8.8)
- [CVE-2026-13249](https://cve.now/CVE-2026-13249.md): Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040 (CVSS 9.8)
- [CVE-2026-17612](https://cve.now/CVE-2026-17612.md): Audit Log Exposure through Unauthorized Access (CVSS 6.9)
- [CVE-2026-4272](https://cve.now/CVE-2026-4272.md): CVE-2026-4272 - Bluetooth Remote Execution of System Commands Vulnerability (CVSS 8.1)
- [CVE-2026-3611](https://cve.now/CVE-2026-3611.md): Honeywell IQ4x BMS Controller Missing authentication for critical function (CVSS 10.0)
- [CVE-2026-1670](https://cve.now/CVE-2026-1670.md): Honeywell CCTV Products Missing Authentication for Critical Function (CVSS 9.3)
- [CVE-2021-47868](https://cve.now/CVE-2021-47868.md): WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path (CVSS 8.5)
- [CVE-2021-47866](https://cve.now/CVE-2021-47866.md): WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path (CVSS 8.5)
- [CVE-2025-12351](https://cve.now/CVE-2025-12351.md): Inadequate access control measure allows unauthorized users to access restricted administrative functions (CVSS 6.8)
- [CVE-2025-3947](https://cve.now/CVE-2025-3947.md): Integer underflow during processing of short network packets in CDA FTEB responder (CVSS 8.2)
- [CVE-2025-3946](https://cve.now/CVE-2025-3946.md): Incorrect response generation during FTEB protocol processing (CVSS 8.2)
- [CVE-2025-2523](https://cve.now/CVE-2025-2523.md): Lack of buffer clearing before reuse may result in incorrect system behavior. (CVSS 9.4)
- [CVE-2025-2522](https://cve.now/CVE-2025-2522.md): Lack of buffer clearing before reuse may result in incorrect system behavior. (CVSS 6.5)
- [CVE-2025-2521](https://cve.now/CVE-2025-2521.md): Lack of indexes’ validation against buffer borders leads to remote code execution. (CVSS 8.6)
- [CVE-2025-2520](https://cve.now/CVE-2025-2520.md): Dereferencing of an uninitialized pointer leads to denial of service. (CVSS 7.5)
- [CVE-2025-2605](https://cve.now/CVE-2025-2605.md): Authenticated command injection (CVSS 9.9)
- [CVE-2023-5878](https://cve.now/CVE-2023-5878.md): OneWireless command injection possible when updating firmware (CVSS 9.4)
- [CVE-2024-6620](https://cve.now/CVE-2024-6620.md): Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. (CVSS 3.5)
- [CVE-2023-51605](https://cve.now/CVE-2023-51605.md): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (CVSS 5.5)
- [CVE-2023-51604](https://cve.now/CVE-2023-51604.md): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (CVSS 5.5)
- [CVE-2023-51603](https://cve.now/CVE-2023-51603.md): Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2023-51602](https://cve.now/CVE-2023-51602.md): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (CVSS 5.5)
- [CVE-2023-51601](https://cve.now/CVE-2023-51601.md): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (CVSS 5.5)
- [CVE-2023-51600](https://cve.now/CVE-2023-51600.md): Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability (CVSS 5.5)
- [CVE-2023-51599](https://cve.now/CVE-2023-51599.md): Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2023-5407](https://cve.now/CVE-2023-5407.md): Controller denial of service due to improper handling of a specially crafted message received by the controller. (CVSS 5.9)
- [CVE-2023-5406](https://cve.now/CVE-2023-5406.md): Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. (CVSS 5.9)
- [CVE-2023-5405](https://cve.now/CVE-2023-5405.md): Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. (CVSS 5.9)
- [CVE-2023-5404](https://cve.now/CVE-2023-5404.md): Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. (CVSS 8.1)
- [CVE-2023-5403](https://cve.now/CVE-2023-5403.md): Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure (CVSS 8.1)
- [CVE-2023-5401](https://cve.now/CVE-2023-5401.md): Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to (CVSS 8.1)
- [CVE-2023-5400](https://cve.now/CVE-2023-5400.md): Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to a (CVSS 8.1)
- [CVE-2023-5398](https://cve.now/CVE-2023-5398.md): Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. (CVSS 5.9)
- [CVE-2023-5397](https://cve.now/CVE-2023-5397.md): Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a fail (CVSS 8.1)
- [CVE-2023-5396](https://cve.now/CVE-2023-5396.md): Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code exe (CVSS 7.4)
- [CVE-2023-5395](https://cve.now/CVE-2023-5395.md): Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote cod (CVSS 8.1)
- [CVE-2023-5394](https://cve.now/CVE-2023-5394.md): Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in pos (CVSS 7.4)
- [CVE-2023-5393](https://cve.now/CVE-2023-5393.md): Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code e (CVSS 7.4)
- [CVE-2023-5392](https://cve.now/CVE-2023-5392.md): C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. (CVSS 7.5)
- [CVE-2023-1841](https://cve.now/CVE-2023-1841.md): Honeywell MPA2 Web Application XSS vulnerability (CVSS 8.1)
- [CVE-2024-1309](https://cve.now/CVE-2024-1309.md): Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5 (CVSS 6.5)
- [CVE-2023-5390](https://cve.now/CVE-2023-5390.md): An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and (CVSS 5.3)
- [CVE-2023-5389](https://cve.now/CVE-2023-5389.md): An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualU (CVSS 9.1)
- [CVE-2023-6179](https://cve.now/CVE-2023-6179.md): Incorrect Permission assignment to program executable folders (CVSS 7.8)
- [CVE-2023-3712](https://cve.now/CVE-2023-3712.md): Potential user privilege escalation (CVSS 6.6)
- [CVE-2023-3711](https://cve.now/CVE-2023-3711.md): Potential Predictable Session ID (CVSS 6.4)
- [CVE-2023-3710](https://cve.now/CVE-2023-3710.md): Printer web page invalid command execution (CVSS 9.9)
- [CVE-2023-25948](https://cve.now/CVE-2023-25948.md): Server Data type confusion - info leak (CVSS 7.5)
- [CVE-2023-26597](https://cve.now/CVE-2023-26597.md): Controller DOS on sending error response (CVSS 7.5)
- [CVE-2023-25770](https://cve.now/CVE-2023-25770.md): Controller stack overflow on decoding messages from the server (CVSS 9.8)
- [CVE-2023-25178](https://cve.now/CVE-2023-25178.md): Controller design flaw - unsigned firmware (CVSS 9.8)
- [CVE-2023-25078](https://cve.now/CVE-2023-25078.md): DoS due to heap overflow (CVSS 9.8)
- [CVE-2023-24480](https://cve.now/CVE-2023-24480.md): Controller stack overflow when decoding messages from the server (CVSS 9.8)
- [CVE-2023-24474](https://cve.now/CVE-2023-24474.md): Server deserialization missing boundary checks - heap overflow in communication between server and controller (CVSS 7.5)
- [CVE-2023-23585](https://cve.now/CVE-2023-23585.md): Server DoS due to heap overflow (CVSS 9.8)
- [CVE-2023-22435](https://cve.now/CVE-2023-22435.md): Server bad parsing implementation - stack overflow in server::get\_db\_path\_for\_driver (CVSS 7.5)
- [CVE-2022-46361](https://cve.now/CVE-2022-46361.md): Physical access to the WDM enables use of USB device to gain access to the WDM (CVSS 6.9)
- [CVE-2022-43485](https://cve.now/CVE-2022-43485.md): Insecure random number used for generating keys for signing Jwt tokens (CVSS 6.2)
- [CVE-2022-4240](https://cve.now/CVE-2022-4240.md): Unauthenticated API allowing an attacker to obtain the information about network resources (CVSS 6.5)
- [CVE-2021-38397](https://cve.now/CVE-2021-38397.md): Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type (CVSS 10.0)
- [CVE-2021-38395](https://cve.now/CVE-2021-38395.md): Honeywell Experion PKS and ACE Controllers Injection (CVSS 9.1)
- [CVE-2021-38399](https://cve.now/CVE-2021-38399.md): Honeywell Experion PKS and ACE Controllers Relative Path Traversal (CVSS 7.5)
- [CVE-2022-2332](https://cve.now/CVE-2022-2332.md): Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource (CVSS 6.2)
- [CVE-2022-2333](https://cve.now/CVE-2022-2333.md): Honeywell SoftMaster Uncontrolled Search Path Element (CVSS 8.8)
- [CVE-2020-6972](https://cve.now/CVE-2020-6972.md): In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay at (no CVSS)
- [CVE-2020-6968](https://cve.now/CVE-2020-6968.md): Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configurati (no CVSS)
- [CVE-2019-13523](https://cve.now/CVE-2019-13523.md): In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to (no CVSS)
- [CVE-2014-5435](https://cve.now/CVE-2014-5435.md): An arbitrary memory write vulnerability exists in the dual\_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6 (no CVSS)
- [CVE-2014-5436](https://cve.now/CVE-2014-5436.md): A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43 (no CVSS)
- [CVE-2014-9186](https://cve.now/CVE-2014-9186.md): A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x bef (no CVSS)
- [CVE-2014-9187](https://cve.now/CVE-2014-9187.md): Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410 (no CVSS)
- [CVE-2014-9189](https://cve.now/CVE-2014-9189.md): Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior t (no CVSS)
- [CVE-2018-14825](https://cve.now/CVE-2018-14825.md): On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android O (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/honeywell
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.