Honeywell vulnerabilities
73 CVEs and advisories name Honeywell as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-5401Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to
- CVE-2023-5400Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to a
- CVE-2023-5398Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service.
- CVE-2023-5397Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a fail
- CVE-2023-5396Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code exe
- CVE-2023-5395Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote cod
- CVE-2023-5394Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in pos
- CVE-2023-5393Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code e
- CVE-2023-5392C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function.
- CVE-2023-1841Honeywell MPA2 Web Application XSS vulnerability
- CVE-2024-1309Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5
- CVE-2023-5390An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and
- CVE-2023-5389 An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualU
- CVE-2023-6179Incorrect Permission assignment to program executable folders
- CVE-2023-3712Potential user privilege escalation
- CVE-2023-3711Potential Predictable Session ID
- CVE-2023-3710Printer web page invalid command execution
- CVE-2023-25948Server Data type confusion - info leak
- CVE-2023-26597Controller DOS on sending error response
- CVE-2023-25770Controller stack overflow on decoding messages from the server
- CVE-2023-25178Controller design flaw - unsigned firmware
- CVE-2023-25078DoS due to heap overflow
- CVE-2023-24480Controller stack overflow when decoding messages from the server
- CVE-2023-24474Server deserialization missing boundary checks - heap overflow in communication between server and controller
- CVE-2023-23585Server DoS due to heap overflow
- CVE-2023-22435 Server bad parsing implementation - stack overflow in server::get_db_path_for_driver
- CVE-2022-46361Physical access to the WDM enables use of USB device to gain access to the WDM
- CVE-2022-43485Insecure random number used for generating keys for signing Jwt tokens
- CVE-2022-4240Unauthenticated API allowing an attacker to obtain the information about network resources
- CVE-2021-38397Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type