Login Request a demo
HO
Vendor
Honeywell
254 products with CVEs on record
464
CVEs
0
On KEV
0
New 30D
Products
SP
Saia Pg5 Controls Suite
Honeywell
8.8
9 CVEs0 on KEV0 new
CF
C300 Firmware
Honeywell
10.0
7 CVEs0 on KEV0 new
CP
C300 PCNT02
Honeywell
9.4
6 CVEs0 on KEV0 new
EP
Experion Process Knowledge System
Honeywell
9.8
6 CVEs0 on KEV0 new
FI
FIM4
Honeywell
9.4
6 CVEs0 on KEV0 new
FI
FIM8
Honeywell
9.4
6 CVEs0 on KEV0 new
C2
C200E
Honeywell
9.4
5 CVEs0 on KEV0 new
CP
C300 PCNT05
Honeywell
9.4
5 CVEs0 on KEV0 new
C3
C300PM
Honeywell
9.4
5 CVEs0 on KEV0 new
CN
CN100
Honeywell
9.4
5 CVEs0 on KEV0 new
DS
Direct Station
Honeywell
7.5
5 CVEs0 on KEV0 new
ES
Engineering Station
Honeywell
7.5
5 CVEs0 on KEV0 new
ES
Experion Server
Honeywell
7.5
5 CVEs0 on KEV0 new
ES
Experion Station
Honeywell
7.5
5 CVEs0 on KEV0 new
HF
Hbw2per1 Firmware
Honeywell
9.8
5 CVEs0 on KEV0 new
HC
HCA
Honeywell
9.4
5 CVEs0 on KEV0 new
HF
Hdzp252di Firmware
Honeywell
9.8
5 CVEs0 on KEV0 new
UO
UOC
Honeywell
9.4
5 CVEs0 on KEV0 new
XW
XL Web II Controller
Honeywell
9.8
5 CVEs0 on KEV0 new
HF
Hpw2p1 Firmware
Honeywell
9.8
4 CVEs0 on KEV0 new
OU
Opc UA Tunneller
Honeywell
9.8
4 CVEs0 on KEV0 new
SM
Safety Manager Firmware
Honeywell
9.8
4 CVEs0 on KEV0 new
WD
Wireless Device Manager
Honeywell
9.4
4 CVEs0 on KEV0 new
AC
Application Control Environment Firmware
Honeywell
10.0
3 CVEs0 on KEV0 new
CF
C200 Firmware
Honeywell
10.0
3 CVEs0 on KEV0 new
CF
C200e Firmware
Honeywell
10.0
3 CVEs0 on KEV0 new
CP
Controledge Plc Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
CR
Controledge Rtu Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
EP
Experion PKS
Honeywell
10.0
3 CVEs0 on KEV0 new
HF
H2w2gr1 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
H2w2pc1m Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
H2w2per3 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
H2w4per3 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
H4w2per2 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
H4w2per3 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
H4w8pr2 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
Hbw2per2 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
Hbw8pr2 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
Hdzp304di Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
Hew2per2 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
Hew2per3 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
Hew4per2b Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
HF
Hew4per3b Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
LN
Lenels2 Netbox
Honeywell
9.8
3 CVEs0 on KEV0 new
MN
Maxpro Nvr PE Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
MN
Maxpro Nvr SE Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
MN
Maxpro Nvr XE Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
ON
Onewireless Network Wireless Device Manager Firmware
Honeywell
7.5
3 CVEs0 on KEV0 new
PF
Pm43 Firmware
Honeywell
9.8
3 CVEs0 on KEV0 new
WI
Win-pak
Honeywell
8.8
3 CVEs0 on KEV0 new
AA
Alerton Ascent Control Module Firmware
Honeywell
8.0
2 CVEs0 on KEV0 new
CU
Controledge Unit Operations Controller Firmware
Honeywell
7.5
2 CVEs0 on KEV0 new
CV
Controledge Virtual Unit Operations Controller Firmware
Honeywell
7.5
2 CVEs0 on KEV0 new
FX
Falcon Xlweb Linux Controller
Honeywell
–
2 CVEs0 on KEV0 new
FX
Falcon Xlweb Xlwebexe
Honeywell
–
2 CVEs0 on KEV0 new
HF
H3w2gr1 Firmware
Honeywell
9.8
2 CVEs0 on KEV0 new
HF
H3w2gr1v Firmware
Honeywell
9.8
2 CVEs0 on KEV0 new
HF
H3w2gr2 Firmware
Honeywell
9.8
2 CVEs0 on KEV0 new
HF
H3w4gr1 Firmware
Honeywell
9.8
2 CVEs0 on KEV0 new
HF
H3w4gr1v Firmware
Honeywell
9.8
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-13248
PI
PD45 Industrial Printer
Honeywell
8.8
0%
Sep 24Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface
CVE-2026-13249
PI
PD45 Industrial Printer
Honeywell
9.8
1%
Sep 24Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040
CVE-2026-17612
SS
S35 Series 3M/5M/8M/PinHole Cameras
Honeywell
6.9
1%
Jul 27Audit Log Exposure through Unauthorized Access
CVE-2026-4272
BS
Barcode Scanners
Honeywell
8.1
1%
Apr 5CVE-2026-4272 - Bluetooth Remote Execution of System Commands Vulnerability
CVE-2026-3611
IQ
IQ422
Honeywell
10.0
6%
Mar 12Honeywell IQ4x BMS Controller Missing authentication for critical function
CVE-2026-1670
I2
I-HIB2PI-UL 2MP IP
Honeywell
9.8
1%
Feb 17Honeywell CCTV Products Missing Authentication for Critical Function
CVE-2021-47868
WP
WIN-PACK PRO
Honeywell
7.8
0%
Jan 21WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path
CVE-2021-47866
WP
WIN-PACK PRO
Honeywell
7.8
0%
Jan 21WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path
CVE-2025-12351
ST
S35 Thermal Camera
Honeywell
6.8
0%
Oct 27Inadequate access control measure allows unauthorized users to access restricted administrative functions
CVE-2025-3947
CP
C300 PCNT02
Honeywell
8.2
0%
Jul 10Integer underflow during processing of short network packets in CDA FTEB responder
CVE-2025-3946
WD
Wireless Device Manager
Honeywell
8.2
1%
Jul 10Incorrect response generation during FTEB protocol processing
CVE-2025-2523
WD
Wireless Device Manager
Honeywell
9.4
1%
Jul 10Lack of buffer clearing before reuse may result in incorrect system behavior.
CVE-2025-2522
WD
Wireless Device Manager
Honeywell
6.5
0%
Jul 10Lack of buffer clearing before reuse may result in incorrect system behavior.
CVE-2025-2521
WD
Wireless Device Manager
Honeywell
8.6
1%
Jul 10Lack of indexes’ validation against buffer borders leads to remote code execution.
CVE-2025-2520
PG
PGM
Honeywell
7.5
0%
Jul 10Dereferencing of an uninitialized pointer leads to denial of service.
CVE-2025-2605
MF
Mb-secure Firmware
Honeywell
8.8
16%
May 2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse
CVE-2024-46453
IF
Iq3xcite Firmware
Honeywell
6.1
0%
Sep 27A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
CVE-2024-2422
LN
Lenels2 Netbox
Honeywell
8.8
1%
May 30LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to…
CVE-2024-2421
LN
Lenels2 Netbox
Honeywell
9.8
1%
May 30LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to…
CVE-2024-2420
LN
Lenels2 Netbox
Honeywell
9.8
1%
May 30LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to…
CVE-2023-51605
SP
Saia Pg5 Controls Suite
Honeywell
6.5
1%
May 3Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
CVE-2023-51604
SP
Saia Pg5 Controls Suite
Honeywell
6.5
1%
May 3Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
CVE-2023-51603
SP
Saia Pg5 Controls Suite
Honeywell
8.8
2%
May 3Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability
CVE-2023-51602
SP
Saia Pg5 Controls Suite
Honeywell
6.5
1%
May 3Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
CVE-2023-51601
SP
Saia Pg5 Controls Suite
Honeywell
6.5
1%
May 3Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
CVE-2023-51600
SP
Saia Pg5 Controls Suite
Honeywell
6.5
1%
May 3Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability
CVE-2023-51599
SP
Saia Pg5 Controls Suite
Honeywell
8.8
2%
May 3Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability
CVE-2023-36483
MA
Masmobile Asp.net Services
Honeywell
6.5
0%
Mar 16Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android  version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier …
CVE-2023-1841
MF
Mpa2 Firmware
Honeywell
4.8
0%
Feb 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid…
CVE-2024-1309
NF
Niagara Framework
Honeywell
7.5
1%
Feb 13Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara…
CVE-2023-5390
CV
Controledge Virtual Unit Operations Controller Firmware
Honeywell
5.3
1%
Jan 31An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC
CVE-2023-5389
CV
Controledge Virtual Unit Operations Controller Firmware
Honeywell
7.5
1%
Jan 30An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC
CVE-2023-6179
PR
Prowatch
Honeywell
7.8
0%
Nov 17Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s)
CVE-2023-3712
PF
Pm43 Firmware
Honeywell
7.8
1%
Sep 12Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43…
CVE-2023-3711
PF
Pm43 Firmware
Honeywell
8.8
1%
Sep 12Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43…
CVE-2023-3710
PF
Pm43 Firmware
Honeywell
9.8
49%
Sep 12Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to…
CVE-2023-26597
CF
C300 Firmware
Honeywell
7.5
1%
Jul 13Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on…
CVE-2023-25948
ES
Experion Station
Honeywell
7.5
1%
Jul 13Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on…
CVE-2023-25770
CF
C300 Firmware
Honeywell
7.5
1%
Jul 13Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on…
CVE-2023-25178
CF
C300 Firmware
Honeywell
9.8
1%
Jul 13Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning
CVE-2023-25078
DS
Direct Station
Honeywell
7.5
1%
Jul 13Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.  See Honeywell Security…
CVE-2023-24480
CF
C300 Firmware
Honeywell
7.5
1%
Jul 13Controller DoS due to stack overflow when decoding a message from the server.  See Honeywell Security Notification for recommendations on upgrading and versioning
CVE-2023-24474
ES
Engineering Station
Honeywell
7.5
1%
Jul 13Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message
CVE-2023-23585
ES
Experion Server
Honeywell
7.5
1%
Jul 13Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation.  See Honeywell Security Notification…
CVE-2023-22435
ES
Experion Server
Honeywell
7.5
1%
Jul 13Experion server may experience a DoS due to a stack overflow when handling a specially crafted message
CVE-2023-3243
AB
Alerton Bcm-web Firmware
Honeywell
9.8
1%
Jun 28** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions
CVE-2022-4240
ON
Onewireless Network Wireless Device Manager Firmware
Honeywell
7.5
1%
May 30Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1
CVE-2022-46361
ON
Onewireless Network Wireless Device Manager Firmware
Honeywell
6.8
0%
May 30An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands
CVE-2022-43485
ON
Onewireless Network Wireless Device Manager Firmware
Honeywell
6.5
0%
May 30Use of Insufficiently Random Values in Honeywell OneWireless
CVE-2021-38397
EP
Experion PKS
Honeywell
10.0
1%
Oct 28Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type
CVE-2021-38395
EP
Experion PKS
Honeywell
9.8
1%
Oct 28Honeywell Experion PKS and ACE Controllers Injection
CVE-2021-38399
EP
Experion PKS
Honeywell
7.5
1%
Oct 28Honeywell Experion PKS and ACE Controllers Relative Path Traversal
CVE-2022-2333
SO
Softmaster
Honeywell
7.8
1%
Sep 16If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s…
CVE-2022-2332
SO
Softmaster
Honeywell
7.8
0%
Sep 16A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment
CVE-2022-30312
TI
Trend Iq4e Firmware
Honeywell
6.5
0%
Sep 7The Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive Information
CVE-2022-30318
CR
Controledge Rtu Firmware
Honeywell
9.8
2%
Aug 31Honeywell ControlEdge through R151.1 uses Hard-coded Credentials
CVE-2022-30317
EL
Experion LX Firmware
Honeywell
9.1
1%
Aug 31Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function
CVE-2022-30320
SP
Saia Pg5 Controls Suite
Honeywell
4.3
0%
Jul 28Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm
CVE-2022-30319
SP
Saia Pg5 Controls Suite
Honeywell
8.1
1%
Jul 28Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass
CVE-2022-30316
SM
Safety Manager Firmware
Honeywell
6.8
0%
Jul 28Honeywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity