HO
Vendor
Honeywell
525
CVEs
0
On KEV
0
New 30D
Products
ES8.1
Experion Server
Honeywell
17 CVEs0 on KEV0 new
SP8.8
Saia PG5 Controls Suite
Honeywell
9 CVEs0 on KEV0 new
CF10.0
C300 Firmware
Honeywell
7 CVEs0 on KEV0 new
EP9.8
Experion Process Knowledge System
Honeywell
7 CVEs0 on KEV0 new
C39.8
C300
Honeywell
6 CVEs0 on KEV0 new
CP9.4
C300 PCNT02
Honeywell
6 CVEs0 on KEV0 new
FI9.4
FIM4
Honeywell
6 CVEs0 on KEV0 new
FI9.4
FIM8
Honeywell
6 CVEs0 on KEV0 new
C29.4
C200E
Honeywell
5 CVEs0 on KEV0 new
CP9.4
C300 PCNT05
Honeywell
5 CVEs0 on KEV0 new
C39.4
C300PM
Honeywell
5 CVEs0 on KEV0 new
CN9.4
CN100
Honeywell
5 CVEs0 on KEV0 new
DS7.5
Direct Station
Honeywell
5 CVEs0 on KEV0 new
ES7.5
Engineering Station
Honeywell
5 CVEs0 on KEV0 new
ES7.5
Experion Station
Honeywell
5 CVEs0 on KEV0 new
HF9.8
Hbw2per1 Firmware
Honeywell
5 CVEs0 on KEV0 new
HC9.4
HCA
Honeywell
5 CVEs0 on KEV0 new
HF9.8
Hdzp252di Firmware
Honeywell
5 CVEs0 on KEV0 new
UO9.4
UOC
Honeywell
5 CVEs0 on KEV0 new
XW9.8
XL Web II Controller
Honeywell
5 CVEs0 on KEV0 new
HF9.8
Hpw2p1 Firmware
Honeywell
4 CVEs0 on KEV0 new
OU9.8
Opc UA Tunneller
Honeywell
4 CVEs0 on KEV0 new
SM9.8
Safety Manager Firmware
Honeywell
4 CVEs0 on KEV0 new
WD9.4
Wireless Device Manager
Honeywell
4 CVEs0 on KEV0 new
AC10.0
Application Control Environment Firmware
Honeywell
3 CVEs0 on KEV0 new
CF10.0
C200 Firmware
Honeywell
3 CVEs0 on KEV0 new
CF10.0
C200e Firmware
Honeywell
3 CVEs0 on KEV0 new
CP9.8
Controledge Plc Firmware
Honeywell
3 CVEs0 on KEV0 new
CR9.8
Controledge Rtu Firmware
Honeywell
3 CVEs0 on KEV0 new
EP10.0
Experion PKS
Honeywell
3 CVEs0 on KEV0 new
HF9.8
H2w2gr1 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
H2w2pc1m Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
H2w2per3 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
H2w4per3 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
H4w2per2 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
H4w2per3 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
H4w8pr2 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
Hbw2per2 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
Hbw8pr2 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
Hdzp304di Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
Hew2per2 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
Hew2per3 Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
Hew4per2b Firmware
Honeywell
3 CVEs0 on KEV0 new
HF9.8
Hew4per3b Firmware
Honeywell
3 CVEs0 on KEV0 new
LN9.8
Lenels2 Netbox
Honeywell
3 CVEs0 on KEV0 new
MN9.8
Maxpro Nvr PE Firmware
Honeywell
3 CVEs0 on KEV0 new
MN9.8
Maxpro Nvr SE Firmware
Honeywell
3 CVEs0 on KEV0 new
MN9.8
Maxpro Nvr XE Firmware
Honeywell
3 CVEs0 on KEV0 new
ON7.5
OneWireless
Honeywell
3 CVEs0 on KEV0 new
ON7.5
Onewireless Network Wireless Device Manager Firmware
Honeywell
3 CVEs0 on KEV0 new
PP9.8
PC23/43, PD43
Honeywell
3 CVEs0 on KEV0 new
PP9.8
PD45, PX240
Honeywell
3 CVEs0 on KEV0 new
PM9.8
PM23/43
Honeywell
3 CVEs0 on KEV0 new
PM9.8
PM42
Honeywell
3 CVEs0 on KEV0 new
PF9.8
Pm43 Firmware
Honeywell
3 CVEs0 on KEV0 new
PM9.8
PM45
Honeywell
3 CVEs0 on KEV0 new
PX9.8
PX45/65
Honeywell
3 CVEs0 on KEV0 new
PX9.8
PX4ie/6ie
Honeywell
3 CVEs0 on KEV0 new
PX9.8
PX940
Honeywell
3 CVEs0 on KEV0 new
RP9.8
RP2f/RP4f
Honeywell
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13248 | PI PD45 Industrial Printer Honeywell | 8.8 | Sep 24 | Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface |
| CVE-2026-13249 | PI PD45 Industrial Printer Honeywell | 9.8 | Sep 24 | Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040 |
| CVE-2026-17612 | SS S35 Series 3M/5M/8M/PinHole Cameras Honeywell | 6.9 | Jul 27 | Audit Log Exposure through Unauthorized Access |
| CVE-2026-4272 | BS Barcode Scanners Honeywell | 8.1 | Apr 5 | CVE-2026-4272 - Bluetooth Remote Execution of System Commands Vulnerability |
| CVE-2026-3611 | IQ IQ412 Honeywell | 10.0 | Mar 12 | Honeywell IQ4x BMS Controller Missing authentication for critical function |
| CVE-2026-1670 | 2I 25M IPC Honeywell | 9.8 | Feb 17 | Honeywell CCTV Products Missing Authentication for Critical Function |
| CVE-2021-47868 | WP WIN-PACK PRO Honeywell | 7.8 | Jan 21 | WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path |
| CVE-2021-47866 | WP WIN-PACK PRO Honeywell | 7.8 | Jan 21 | WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path |
| CVE-2025-12351 | SA S35 AI Fisheye&Dual Sensor/Micro Dome/Full Color Eyeball&Bullet Camera Honeywell | 6.8 | Oct 27 | Inadequate access control measure allows unauthorized users to access restricted administrative functions |
| CVE-2025-3947 | CN CN100 Honeywell | 8.2 | Jul 10 | Integer underflow during processing of short network packets in CDA FTEB responder |
| CVE-2025-3946 | WD Wireless Device Manager Honeywell | 8.2 | Jul 10 | Incorrect response generation during FTEB protocol processing |
| CVE-2025-2523 | HC HCA Honeywell | 9.4 | Jul 10 | Lack of buffer clearing before reuse may result in incorrect system behavior. |
| CVE-2025-2522 | HC HCA Honeywell | 6.5 | Jul 10 | Lack of buffer clearing before reuse may result in incorrect system behavior. |
| CVE-2025-2521 | UO UOC Honeywell | 8.6 | Jul 10 | Lack of indexes’ validation against buffer borders leads to remote code execution. |
| CVE-2025-2520 | CE Classic ENIM Honeywell | 7.5 | Jul 10 | Dereferencing of an uninitialized pointer leads to denial of service. |
| CVE-2025-2605 | MB MB-Secure Honeywell | 8.8 | May 2 | Authenticated command injection |
| CVE-2023-5878 | ON OneWireless Network Wireless Device Manager Honeywell | 9.4 | Feb 6 | OneWireless command injection possible when updating firmware |
| CVE-2024-46453 | IF Iq3xcite Firmware Honeywell | 6.1 | Sep 27 | A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload |
| CVE-2024-6620 | PP PC42t, PC42tp, and PC42d (Common Firmware) Honeywell | 3.5 | Jul 29 | Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability |
| CVE-2024-2422 | LN Lenels2 Netbox Honeywell | 8.8 | May 30 | LenelS2 NetBox Improper Neutralization of Argumented Delimiters |
| CVE-2024-2421 | LN Lenels2 Netbox Honeywell | 9.8 | May 30 | LenelS2 NetBox Improper Neutralization of Special Elements |
| CVE-2024-2420 | LN Lenels2 Netbox Honeywell | 9.8 | May 30 | LenelS2 NetBox Hardcoded Credentials |
| CVE-2023-51605 | SP Saia PG5 Controls Suite Honeywell | 6.5 | May 3 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability |
| CVE-2023-51604 | SP Saia PG5 Controls Suite Honeywell | 6.5 | May 3 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability |
| CVE-2023-51603 | SP Saia PG5 Controls Suite Honeywell | 8.8 | May 3 | Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability |
| CVE-2023-51602 | SP Saia PG5 Controls Suite Honeywell | 6.5 | May 3 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability |
| CVE-2023-51601 | SP Saia PG5 Controls Suite Honeywell | 6.5 | May 3 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability |
| CVE-2023-51600 | SP Saia PG5 Controls Suite Honeywell | 6.5 | May 3 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability |
| CVE-2023-51599 | SP Saia PG5 Controls Suite Honeywell | 8.8 | May 3 | Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability |
| CVE-2023-5407 | C3 C300 Honeywell | 5.9 | Apr 17 | Controller denial of service due to improper handling of a specially crafted message received by the controller |
| CVE-2023-5406 | ES Experion Server Honeywell | 5.9 | Apr 17 | Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security Notification for… |
| CVE-2023-5405 | ES Experion Server Honeywell | 5.9 | Apr 17 | Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell Security Notification for… |
| CVE-2023-5404 | ES Experion Server Honeywell | 8.1 | Apr 17 | Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for… |
| CVE-2023-5403 | ES Experion Server Honeywell | 8.1 | Apr 17 | Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure |
| CVE-2023-5401 | ES Experion Server Honeywell | 8.1 | Apr 17 | Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code… |
| CVE-2023-5400 | ES Experion Server Honeywell | 8.1 | Apr 17 | Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code… |
| CVE-2023-5398 | ES Experion Server Honeywell | 5.9 | Apr 17 | Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for recommendations on… |
| CVE-2023-5397 | ES Experion Server Honeywell | 8.1 | Apr 17 | Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security… |
| CVE-2023-5396 | ES Experion Server Honeywell | 7.4 | Apr 17 | Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security… |
| CVE-2023-5395 | ES Experion Server Honeywell | 8.1 | Apr 17 | Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security… |
| CVE-2023-5394 | ES Experion Server Honeywell | 7.4 | Apr 11 | Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell… |
| CVE-2023-5393 | ES Experion Server Honeywell | 7.4 | Apr 11 | Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution |
| CVE-2023-5392 | C3 C300 Honeywell | 7.5 | Apr 11 | C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most… |
| CVE-2023-36483 | MA Masmobile Asp.net Services Honeywell | 6.5 | Mar 16 | MAS (a Carrier brand) MASmobile Classic Authorization Bypass |
| CVE-2023-1841 | MA MPA2 Access Panel Honeywell | 4.8 | Feb 29 | Honeywell MPA2 Web Application XSS vulnerability |
| CVE-2024-1309 | NF Niagara Framework Honeywell | 7.5 | Feb 13 | Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5 |
| CVE-2023-5390 | CU ControlEdge UOC Honeywell | 5.3 | Jan 31 | An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC |
| CVE-2023-5389 | CU ControlEdge UOC Honeywell | 7.5 | Jan 30 | An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC |
| CVE-2023-6179 | PR ProWatch Honeywell | 7.8 | Nov 17 | Incorrect Permission assignment to program executable folders |
| CVE-2023-3712 | PP PC23/43, PD43 Honeywell | 7.8 | Sep 12 | Potential user privilege escalation |
| CVE-2023-3711 | PP PC23/43, PD43 Honeywell | 8.8 | Sep 12 | Potential Predictable Session ID |
| CVE-2023-3710 | PP PC23/43, PD43 Honeywell | 9.8 | Sep 12 | Printer web page invalid command execution |
| CVE-2023-25948 | ES Engineering Station Honeywell | 7.5 | Jul 13 | Server Data type confusion - info leak |
| CVE-2023-26597 | C3 C300 Honeywell | 7.5 | Jul 13 | Controller DOS on sending error response |
| CVE-2023-25770 | C3 C300 Honeywell | 7.5 | Jul 13 | Controller stack overflow on decoding messages from the server |
| CVE-2023-25178 | C3 C300 Honeywell | 9.8 | Jul 13 | Controller design flaw - unsigned firmware |
| CVE-2023-25078 | DS Direct Station Honeywell | 7.5 | Jul 13 | DoS due to heap overflow |
| CVE-2023-24480 | C3 C300 Honeywell | 7.5 | Jul 13 | Controller stack overflow when decoding messages from the server |
| CVE-2023-24474 | ES Experion Server Honeywell | 7.5 | Jul 13 | Server deserialization missing boundary checks - heap overflow in communication between server and controller |
| CVE-2023-23585 | DS Direct Station Honeywell | 7.5 | Jul 13 | Server DoS due to heap overflow |