Vulnerabilidades em Honeywell

73 resultados
Análise Vexday

Com 70 CVEs catalogadas, o portfólio de vulnerabilidades da Honeywell apresenta taxa de exploração ativa abaixo da média geral do catálogo KEV, sem nenhum registro confirmado de exploração ativa no momento. Ainda assim, 14 falhas são classificadas como críticas, e o tipo de falha mais recorrente é CWE-121 (Stack-based Buffer Overflow), categoria historicamente associada a impactos severos em sistemas de controle industrial e automação. A CVE mais perigosa em destaque, CVE-2023-3710, concentra o maior escore EPSS observado no conjunto (0,33), indicando probabilidade relevante de exploração futura, especialmente considerando a existência de prova de conceito pública. Equipes de segurança que operam ambientes com tecnologias Honeywell devem priorizar a remediação das falhas críticas com PoC disponível, dado o perfil de risco elevado que essas combinações representam.

CVE-2023-5406MEDIUMServer communication with a controller can lead to remote code execution using a specially crafted message from the controller. See HoneywelEPSS 0.7%CVE-2026-4272HIGHCVE-2026-4272 - Bluetooth Remote Execution of System Commands VulnerabilityEPSS 0.7%CVE-2023-24474HIGHServer deserialization missing boundary checks - heap overflow in communication between server and controllerEPSS 0.7%CVE-2023-25078CRITICALDoS due to heap overflowEPSS 0.7%CVE-2023-23585CRITICALServer DoS due to heap overflowEPSS 0.7%CVE-2023-26597HIGHController DOS on sending error responseEPSS 0.6%CVE-2023-22435HIGH Server bad parsing implementation - stack overflow in server::get_db_path_for_driverEPSS 0.6%CVE-2023-5390MEDIUMAn attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC andEPSS 0.6%CVE-2023-25948HIGHServer Data type confusion - info leak EPSS 0.6%CVE-2025-3946HIGHIncorrect response generation during FTEB protocol processingEPSS 0.6%CVE-2023-3712MEDIUMPotential user privilege escalationEPSS 0.6%CVE-2026-17612MEDIUMAudit Log Exposure through Unauthorized AccessEPSS 0.5%CVE-2022-4240MEDIUMUnauthenticated API allowing an attacker to obtain the information about network resourcesEPSS 0.5%CVE-2023-25178CRITICALController design flaw - unsigned firmwareEPSS 0.5%CVE-2025-2521HIGHLack of indexes’ validation against buffer borders leads to remote code execution.EPSS 0.5%CVE-2023-5392HIGHC300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. HoneyweEPSS 0.5%CVE-2022-43485MEDIUMInsecure random number used for generating keys for signing Jwt tokensEPSS 0.5%CVE-2023-5398MEDIUMServer receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell SecurityEPSS 0.4%CVE-2023-5407MEDIUMController denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security NotEPSS 0.4%CVE-2026-13248HIGHAuthenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command InterfaceEPSS 0.4%