https://vulnogram.org/ Most recent CVEs assigned by Honeywell International Inc. (honeywell). https://vulnogram.org/seaview/icons/honeywell.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-13248 https://vulnogram.org/CVE-2026-13248 An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows an authenticated user with… High Thu, 24 Sep 2026 18:27:33 GMT https://vulnogram.org/CVE-2026-13249 https://vulnogram.org/CVE-2026-13249 An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows upload of attacker controlled files without requiring authentication.… Critical Network Exploitable Thu, 24 Sep 2026 18:24:36 GMT https://vulnogram.org/CVE-2026-17612 https://vulnogram.org/CVE-2026-17612 Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an attacker to access audit logs without authentication, potentially resul… Medium Network Exploitable Mon, 27 Jul 2026 18:45:35 GMT https://vulnogram.org/CVE-2026-11804 https://vulnogram.org/CVE-2026-11804 Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: be… Medium Thu, 23 Jul 2026 15:07:42 GMT https://vulnogram.org/CVE-2026-13742 https://vulnogram.org/CVE-2026-13742 Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit this vulnerability, leading to the replacement of downloaded file with a… Medium Mon, 29 Jun 2026 15:19:38 GMT https://vulnogram.org/CVE-2026-5434 https://vulnogram.org/CVE-2026-5434 Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data.… Medium Network Exploitable Thu, 21 May 2026 08:38:25 GMT https://vulnogram.org/CVE-2026-5433 https://vulnogram.org/CVE-2026-5433 Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Remote Code Execution (RCE). Honeywell recommends upda… Critical Thu, 21 May 2026 08:35:31 GMT https://vulnogram.org/CVE-2026-4272 https://vulnogram.org/CVE-2026-4272 Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x1000) before GK000432BAA, from D1 Base(Ingenic x1600) before HE000085BAA… High Network Exploitable Sun, 05 Apr 2026 22:00:27 GMT https://vulnogram.org/CVE-2025-12351 https://vulnogram.org/CVE-2025-12351 Honeywell S35 Series Cameras contains an authorization bypass Vulnerability through User controller key. An attacker could potentially exploit this vulnerability, leading to Privilege Escalation to admin privileged functionalities . Honeywell also re… Medium Mon, 27 Oct 2025 15:03:57 GMT https://vulnogram.org/CVE-2025-3947 https://vulnogram.org/CVE-2025-3947 The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in improper integer da… High Network Exploitable Thu, 10 Jul 2025 20:19:13 GMT https://vulnogram.org/CVE-2025-3946 https://vulnogram.org/CVE-2025-3946 The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could… High Network Exploitable Thu, 10 Jul 2025 20:16:54 GMT https://vulnogram.org/CVE-2025-2523 https://vulnogram.org/CVE-2025-2523 The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which co… Critical Network Exploitable Thu, 10 Jul 2025 20:15:32 GMT https://vulnogram.org/CVE-2025-2522 https://vulnogram.org/CVE-2025-2522 The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulat… Medium Network Exploitable Thu, 10 Jul 2025 20:11:43 GMT https://vulnogram.org/CVE-2025-2521 https://vulnogram.org/CVE-2025-2521 The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to an Overread Buffers, which could result in improper… High Network Exploitable Thu, 10 Jul 2025 20:08:04 GMT https://vulnogram.org/CVE-2025-2520 https://vulnogram.org/CVE-2025-2520 The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a der… High Network Exploitable Thu, 10 Jul 2025 19:54:35 GMT https://vulnogram.org/CVE-2025-3945 https://vulnogram.org/CVE-2025-3945 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4… High Thu, 22 May 2025 12:47:00 GMT https://vulnogram.org/CVE-2025-3944 https://vulnogram.org/CVE-2025-3944 Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4… High Thu, 22 May 2025 12:44:55 GMT https://vulnogram.org/CVE-2025-3943 https://vulnogram.org/CVE-2025-3943 Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: bef… Medium Thu, 22 May 2025 12:42:13 GMT https://vulnogram.org/CVE-2025-3942 https://vulnogram.org/CVE-2025-3942 Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2,… Medium Thu, 22 May 2025 12:40:12 GMT https://vulnogram.org/CVE-2025-3941 https://vulnogram.org/CVE-2025-3941 Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, befor… Medium Thu, 22 May 2025 12:38:15 GMT https://vulnogram.org/CVE-2025-3940 https://vulnogram.org/CVE-2025-3940 Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, be… Medium Network Exploitable Thu, 22 May 2025 12:35:14 GMT https://vulnogram.org/CVE-2025-3939 https://vulnogram.org/CVE-2025-3939 Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, be… Medium Network Exploitable Thu, 22 May 2025 12:33:48 GMT https://vulnogram.org/CVE-2025-3938 https://vulnogram.org/CVE-2025-3938 Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before… Medium Thu, 22 May 2025 12:32:01 GMT https://vulnogram.org/CVE-2025-3937 https://vulnogram.org/CVE-2025-3937 Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: befo… High Thu, 22 May 2025 12:23:42 GMT https://vulnogram.org/CVE-2025-3936 https://vulnogram.org/CVE-2025-3936 Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ni… Medium Thu, 22 May 2025 12:20:42 GMT https://vulnogram.org/CVE-2025-2605 https://vulnogram.org/CVE-2025-2605 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.0… Critical Fri, 02 May 2025 12:39:39 GMT https://vulnogram.org/CVE-2023-5878 https://vulnogram.org/CVE-2023-5878 Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process t… Critical Thu, 06 Feb 2025 14:10:30 GMT https://vulnogram.org/CVE-2024-6620 https://vulnogram.org/CVE-2024-6620 Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side r… Low Mon, 29 Jul 2024 20:14:27 GMT https://vulnogram.org/CVE-2023-5407 https://vulnogram.org/CVE-2023-5407 Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. Medium Network Exploitable Wed, 17 Apr 2024 16:49:16 GMT https://vulnogram.org/CVE-2023-5406 https://vulnogram.org/CVE-2023-5406 Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. Medium Network Exploitable Wed, 17 Apr 2024 16:47:50 GMT https://vulnogram.org/CVE-2023-5405 https://vulnogram.org/CVE-2023-5405 Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning. Medium Network Exploitable Wed, 17 Apr 2024 16:46:29 GMT https://vulnogram.org/CVE-2023-5404 https://vulnogram.org/CVE-2023-5404 Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning. High Network Exploitable Wed, 17 Apr 2024 16:44:37 GMT https://vulnogram.org/CVE-2023-5403 https://vulnogram.org/CVE-2023-5403 Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. High Network Exploitable Wed, 17 Apr 2024 16:43:54 GMT https://vulnogram.org/CVE-2023-5401 https://vulnogram.org/CVE-2023-5401 Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for rec… High Network Exploitable Wed, 17 Apr 2024 16:42:00 GMT https://vulnogram.org/CVE-2023-5400 https://vulnogram.org/CVE-2023-5400 Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for reco… High Network Exploitable Wed, 17 Apr 2024 16:41:10 GMT https://vulnogram.org/CVE-2023-5398 https://vulnogram.org/CVE-2023-5398 Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on upgrading and versioning. Medium Network Exploitable Wed, 17 Apr 2024 16:40:10 GMT https://vulnogram.org/CVE-2023-5397 https://vulnogram.org/CVE-2023-5397 Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. High Network Exploitable Wed, 17 Apr 2024 16:38:21 GMT https://vulnogram.org/CVE-2023-5396 https://vulnogram.org/CVE-2023-5396 Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning. High Network Exploitable Wed, 17 Apr 2024 16:37:41 GMT https://vulnogram.org/CVE-2023-5395 https://vulnogram.org/CVE-2023-5395 Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning. High Network Exploitable Wed, 17 Apr 2024 16:37:00 GMT https://vulnogram.org/CVE-2023-5394 https://vulnogram.org/CVE-2023-5394 Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Hone… High Network Exploitable Thu, 11 Apr 2024 19:21:52 GMT https://vulnogram.org/CVE-2023-5393 https://vulnogram.org/CVE-2023-5393 Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Noti… High Network Exploitable Thu, 11 Apr 2024 19:20:20 GMT https://vulnogram.org/CVE-2023-5392 https://vulnogram.org/CVE-2023-5392 C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for reco… High Network Exploitable Thu, 11 Apr 2024 19:19:19 GMT https://vulnogram.org/CVE-2023-1841 https://vulnogram.org/CVE-2023-1841 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid Characters.This issue affects MPA2 Access Panel all version prior to R1.00… High Network Exploitable Thu, 29 Feb 2024 05:09:14 GMT https://vulnogram.org/CVE-2024-1309 https://vulnogram.org/CVE-2024-1309 Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara AX 3.8.1, before Niagara 4.1. Medium Network Exploitable Tue, 13 Feb 2024 13:41:51 GMT https://vulnogram.org/CVE-2023-5390 https://vulnogram.org/CVE-2023-5390 An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited informa… Medium Network Exploitable Wed, 31 Jan 2024 17:46:39 GMT https://vulnogram.org/CVE-2023-5389 https://vulnogram.org/CVE-2023-5389 An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior base… Critical Network Exploitable Tue, 30 Jan 2024 20:00:50 GMT https://vulnogram.org/CVE-2023-6179 https://vulnogram.org/CVE-2023-6179 Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) attacker could potentially exploit this vulnerability, leading to a standard user to have arbitrary system code e… High Fri, 17 Nov 2023 17:03:32 GMT https://vulnogram.org/CVE-2023-3712 https://vulnogram.org/CVE-2023-3712 Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware… Medium Tue, 12 Sep 2023 19:59:00 GMT https://vulnogram.org/CVE-2023-3711 https://vulnogram.org/CVE-2023-3711 Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware ver… Medium Network Exploitable Tue, 12 Sep 2023 19:57:50 GMT https://vulnogram.org/CVE-2023-3710 https://vulnogram.org/CVE-2023-3710 Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective pr… Critical Network Exploitable Tue, 12 Sep 2023 19:55:41 GMT