Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-38395

Honeywell Experion PKS and ACE Controllers Injection

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
Honeywell
Products
Application Control Environment Application Control Environment Firmware C200 and 5 more
CVE-2021-38397

Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition.

CVSS 3.1 · 10 Critical EPSS 1.2% KEV · Not listed
Vendors
Honeywell
Products
Application Control Environment Application Control Environment Firmware C200 and 5 more