Honeywell vulnerabilities

Products

• Experion Server 17
• Experion Server 13
• Saia Pg5 Controls Suite 9
• Experion Pks 8
• C300 Firmware 7
• Experion Process Knowledge System 7
• Saia Pg5 Controls Suite 7
• C300 6
• C300 Pcnt02 6
• Fim4 6
• Fim8 6
• C200e 5
• C300 Pcnt05 5
• C300pm 5
• Cn100 5
• Direct Station 5
• Direct Station 5
• Engineering Station 5
• Engineering Station 5
• Experion Station 5
• Experion Station 5
• Hbw2per1 Firmware 5
• Hca 5
• Hdzp252di Firmware 5
• Uoc 5
• Xl Web Ii Controller 5
• Hpw2p1 Firmware 4
• Opc Ua Tunneller 4
• Safety Manager Firmware 4
• Wireless Device Manager 4
• Application Control Environment Firmware 3
• C200e Firmware 3
• C200 Firmware 3
• Controledge Plc Firmware 3
• Controledge Rtu Firmware 3
• H2w2gr1 Firmware 3
• H2w2pc1m Firmware 3
• H2w2per3 Firmware 3
• H2w4per3 Firmware 3
• H4w2per2 Firmware 3

Show 89 moreShow less

• H4w2per3 Firmware 3
• H4w8pr2 Firmware 3
• Hbw2per2 Firmware 3
• Hbw8pr2 Firmware 3
• Hdzp304di Firmware 3
• Hew2per2 Firmware 3
• Hew2per3 Firmware 3
• Hew4per2b Firmware 3
• Hew4per3b Firmware 3
• Lenels2 Netbox 3
• Maxpro Nvr Pe Firmware 3
• Maxpro Nvr Se Firmware 3
• Maxpro Nvr Xe Firmware 3
• Onewireless 3
• Onewireless Network Wireless Device Manager Firmware 3
• Pc23/43, Pd43 3
• Pd45, Px240 3
• Pm23/43 3
• Pm42 3
• Pm43 Firmware 3
• Pm45 3
• Px45/65 3
• Px4ie/6ie 3
• Px940 3
• Rp2f/rp4f 3
• Win-pak 3
• Alerton Ascent Control Module Firmware 2
• Controledge Plc 2
• Controledge Rtu 2
• Controledge Unit Operations Controller Firmware 2
• Controledge Uoc 2
• Controledge Virtual Unit Operations Controller Firmware 2
• Falcon Xlweb Linux Controller 2
• Falcon Xlweb Xlwebexe 2
• H3w2gr1 Firmware 2
• H3w2gr1v Firmware 2
• H3w2gr2 Firmware 2
• H3w4gr1 Firmware 2
• H3w4gr1v Firmware 2
• H4d8gr1 Firmware 2
• H4l2gr1 Firmware 2
• H4l2gr1v Firmware 2
• H4l6gr2 Firmware 2
• H4w2gr1 Firmware 2
• H4w2gr1v Firmware 2
• H4w2gr2 Firmware 2
• H4w4gr1 Firmware 2
• H4w4gr1v Firmware 2
• H4w4per2 Firmware 2
• H4w4per3 Firmware 2
• Hbd2per1 Firmware 2
• Hbd8gr1 Firmware 2
• Hbl2gr1v Firmware 2
• Hbl6gr2 Firmware 2
• Hbw2gr1v Firmware 2
• Hbw2gr3v Firmware 2
• Hbw4gr1v Firmware 2
• Hbw4per1 Firmware 2
• Hbw4per2 Firmware 2
• Hbw4pgr1 Firmware 2
• Hcd8g Firmware 2
• Hcl2g Firmware 2
• Hcl2gv Firmware 2
• Hcw2g Firmware 2
• Hcw2gv Firmware 2
• Hcw4g Firmware 2
• Hdz302de Firmware 2
• Hdz302d Firmware 2
• Hdz302din-c1 Firmware 2
• Hdz302din-s1 Firmware 2
• Hdz302lik Firmware 2
• Hdz302liw Firmware 2
• Hed2per3 Firmware 2
• Hew4per3 Firmware 2
• Hfd6gr1 Firmware 2
• Hfd8gr1 Firmware 2
• Hm4l8gr1 Firmware 2
• Hmbl8gr1 Firmware 2
• Hnmswvms Firmware 2
• Hnmswvmslt Firmware 2
• Midas Black Firmware 2
• Midas Firmware 2
• Mpnvrswxx Firmware 2
• Notifier Webserver 2
• Pd45 Industrial Printer 2
• Softmaster 2
• Symmetre 2
• Tuxedo Touch 2
• Win-pack Pro 2

Newest

• honeywell pd45 industrial printer Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface CVE-2026-13248 8.8 HighSeptember 24, 2026
• honeywell pd45 industrial printer Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040 CVE-2026-13249 Public exploit 9.8 CriticalSeptember 24, 2026
• honeywell s35 series 3m/5m/8m/pinhole cameras Audit Log Exposure through Unauthorized Access CVE-2026-17612 6.9 MediumJuly 27, 2026
• honeywell barcode scanners CVE-2026-4272 - Bluetooth Remote Execution of System Commands Vulnerability CVE-2026-4272 8.1 HighApril 5, 2026
• honeywell iq3, iq412, iq412 firmware +9 more +11 more Honeywell IQ4x BMS Controller Missing authentication for critical function CVE-2026-3611 Public exploit 10.0 CriticalMarch 12, 2026
• honeywell 25m ipc, i-hib2pi-ul 2mp ip, ptz wdr 2mp 32m +1 more +3 more Honeywell CCTV Products Missing Authentication for Critical Function CVE-2026-1670 9.3 CriticalFebruary 17, 2026
• honeywell win-pack pro WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path CVE-2021-47868 8.5 HighJanuary 21, 2026
• honeywell win-pack pro WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path CVE-2021-47866 8.5 HighJanuary 21, 2026
• honeywell s35 thermal camera, s35 3m/5m/8m/pinhole/kit camera, s35 ai fisheye&dual sensor/micro dome/full color eyeball&bullet camera +2 more Inadequate access control measure allows unauthorized users to access restricted administrative functions CVE-2025-12351 6.8 MediumOctober 27, 2025
• honeywell c200e, c300 pcnt02, c300 pcnt05 +6 more +8 more Integer underflow during processing of short network packets in CDA FTEB responder CVE-2025-3947 8.2 HighJuly 10, 2025
• honeywell c200e, c300 pcnt02, c300 pcnt05 +7 more +9 more Incorrect response generation during FTEB protocol processing CVE-2025-3946 8.2 HighJuly 10, 2025
• honeywell c200e, c300 pcnt02, c300 pcnt05 +7 more +9 more Lack of buffer clearing before reuse may result in incorrect system behavior. CVE-2025-2523 9.4 CriticalJuly 10, 2025
• honeywell c200e, c300pm, cn100 +7 more +9 more Lack of buffer clearing before reuse may result in incorrect system behavior. CVE-2025-2522 6.5 MediumJuly 10, 2025
• honeywell c200e, c300 pcnt02, c300 pcnt05 +7 more +9 more Lack of indexes’ validation against buffer borders leads to remote code execution. CVE-2025-2521 8.6 HighJuly 10, 2025
• honeywell c300 pcnt02, classic enim, ehb +7 more +9 more Dereferencing of an uninitialized pointer leads to denial of service. CVE-2025-2520 7.5 HighJuly 10, 2025
• honeywell mb-secure, mb-secure firmware, mb-secure pro firmware +2 more Authenticated command injection CVE-2025-2605 EPSS 16.0% 9.9 CriticalMay 2, 2025
• honeywell onewireless network wireless device manager OneWireless command injection possible when updating firmware CVE-2023-5878 9.4 CriticalFebruary 6, 2025
• honeywell iq3xcite firmware A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05... CVE-2024-46453 6.1 MediumSeptember 27, 2024
• honeywell pc42t, pc42tp, and pc42d (common firmware) Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site... CVE-2024-6620 3.5 LowJuly 29, 2024
• carrier lenels2 netbox, lenels2 netbox +1 more LenelS2 NetBox Improper Neutralization of Argumented Delimiters CVE-2024-2422 9.3 CriticalMay 30, 2024
• carrier lenels2 netbox, lenels2 netbox +1 more LenelS2 NetBox Improper Neutralization of Special Elements CVE-2024-2421 9.3 CriticalMay 30, 2024
• carrier lenels2 netbox, lenels2 netbox +1 more LenelS2 NetBox Hardcoded Credentials CVE-2024-2420 8.8 HighMay 30, 2024
• honeywell saia pg5 controls suite Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability CVE-2023-51605 5.5 MediumMay 3, 2024
• honeywell saia pg5 controls suite Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability CVE-2023-51604 5.5 MediumMay 3, 2024
• honeywell saia pg5 controls suite Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability CVE-2023-51603 7.8 HighMay 3, 2024
• honeywell saia pg5 controls suite Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability CVE-2023-51602 5.5 MediumMay 3, 2024
• honeywell saia pg5 controls suite Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability CVE-2023-51601 5.5 MediumMay 3, 2024
• honeywell saia pg5 controls suite Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability CVE-2023-51600 5.5 MediumMay 3, 2024
• honeywell saia pg5 controls suite Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability CVE-2023-51599 7.8 HighMay 3, 2024
• honeywell c300 Controller denial of service due to improper handling of a specially crafted message received by... CVE-2023-5407 5.9 MediumApril 17, 2024
• honeywell experion server Server communication with a controller can lead to remote code execution using a specially... CVE-2023-5406 5.9 MediumApril 17, 2024
• honeywell experion server Server information leak for the CDA Server process memory can occur when an error is generated in... CVE-2023-5405 5.9 MediumApril 17, 2024
• honeywell experion server Server receiving a malformed message can cause a pointer to be overwritten which can result in a... CVE-2023-5404 8.1 HighApril 17, 2024
• honeywell experion server Server hostname translation to IP address manipulation which could lead to an attacker performing... CVE-2023-5403 8.1 HighApril 17, 2024
• honeywell experion server Server receiving a malformed message based on a using the specified key values can cause a stack... CVE-2023-5401 8.1 HighApril 17, 2024
• honeywell experion server Server receiving a malformed message based on a using the specified key values can cause a heap... CVE-2023-5400 8.1 HighApril 17, 2024
• honeywell experion server Server receiving a malformed message based on a list of IPs resulting in heap corruption causing... CVE-2023-5398 5.9 MediumApril 17, 2024
• honeywell experion server Server receiving a malformed message to create a new connection could lead to an attacker... CVE-2023-5397 8.1 HighApril 17, 2024
• honeywell experion server Server receiving a malformed message creates connection for a hostname that may cause a stack... CVE-2023-5396 7.4 HighApril 17, 2024
• honeywell experion server Server receiving a malformed message that uses the hostname in an internal table may cause a... CVE-2023-5395 8.1 HighApril 17, 2024
• honeywell experion server, experion lx, experion process knowledge system +1 more +3 more Server receiving a malformed message that where the GCL message hostname may be too large which... CVE-2023-5394 7.4 HighApril 11, 2024
• honeywell experion server Server receiving a malformed message that causes a disconnect to a hostname may causing a stack... CVE-2023-5393 7.4 HighApril 11, 2024
• honeywell c300 C300 information leak due to an analysis feature which allows extracting more memory over the... CVE-2023-5392 7.5 HighApril 11, 2024
• carrier masmobile classic, mas asp.net services, honeywell masmobile asp.net services +1 more +3 more MAS (a Carrier brand) MASmobile Classic Authorization Bypass CVE-2023-36483 6.5 MediumMarch 16, 2024
• honeywell mpa2 access panel, mpa2 firmware +1 more Honeywell MPA2 Web Application XSS vulnerability CVE-2023-1841 8.1 HighFebruary 29, 2024
• honeywell niagara framework Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5 CVE-2024-1309 6.5 MediumFebruary 13, 2024
• honeywell controledge uoc, controledge unit operations controller firmware, controledge virtual unit operations controller firmware +2 more An attacker could potentially exploit this vulnerability, leading to files being read from the... CVE-2023-5390 5.3 MediumJanuary 31, 2024
• honeywell controledge uoc, controledge unit operations controller firmware, controledge virtual unit operations controller firmware +2 more An attacker could potentially exploit this vulnerability, leading to the ability to modify files... CVE-2023-5389 9.1 CriticalJanuary 30, 2024
• honeywell prowatch Incorrect Permission assignment to program executable folders CVE-2023-6179 7.8 HighNovember 17, 2023
• honeywell pc23/43, pd43, pd45, px240, pm23/43 +7 more +9 more Potential user privilege escalation CVE-2023-3712 6.6 MediumSeptember 12, 2023
• Show olderLoading…