Honeywell vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-13249 An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F1Critical 9.8 · Sep 24, 2026
• CVE-2026-13248 An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in HHigh 8.8 · Sep 24, 2026
• CVE-2026-5433 Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface.Critical 9.1 · May 21, 2026
• CVE-2026-4272 Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: fromHigh 8.1 · Apr 5, 2026
• CVE-2026-3611 The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Critical 10 · Mar 12, 2026
• CVE-2026-1670 The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery Critical 9.3 · Feb 17, 2026
• CVE-2021-47868 WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated pHigh 8.5 · Jan 21, 2026
• CVE-2021-47866 WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated systeHigh 8.5 · Jan 21, 2026
• CVE-2025-3947 The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA).High 8.2 · Jul 10, 2025
• CVE-2025-3946 The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA).High 8.2 · Jul 10, 2025
• CVE-2025-2523 The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA).Critical 9.4 · Jul 10, 2025
• CVE-2025-2521 The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA).High 8.6 · Jul 10, 2025
• CVE-2025-2520 The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications.High 7.5 · Jul 10, 2025
• CVE-2025-2605 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse.Critical 9.9 · May 2, 2025
• CVE-2023-5878 Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injecCritical 9.4 · Feb 6, 2025
• CVE-2023-51603 Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability.High 8.8 · May 2, 2024
• CVE-2023-51599 Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability.High 8.8 · May 2, 2024
• CVE-2023-5404 Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure.High 8.1 · Apr 17, 2024
• CVE-2023-5403 Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure.High 8.1 · Apr 17, 2024
• CVE-2023-5401 Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performiHigh 8.1 · Apr 17, 2024
• CVE-2023-5400 Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performinHigh 8.1 · Apr 17, 2024
• CVE-2023-5397 Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure.High 8.1 · Apr 17, 2024
• CVE-2023-5396 Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution.High 7.4 · Apr 17, 2024
• CVE-2023-5395 Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution.High 8.1 · Apr 17, 2024
• CVE-2023-5394 Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code exHigh 7.4 · Apr 11, 2024