Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-5878

OneWireless command injection possible when updating firmware

Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading to a command injection. Honeywell recommends updating to R322.3, R330.2 or the most recent version of this product2.

CVSS 4.0 · 9.4 Critical EPSS 1.0% KEV · Not listed
Vendors
Honeywell
Products
Onewireless Network Wireless Device Manager
CVE-2022-46361

Physical access to the WDM enables use of USB device to gain access to the WDM

An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.

CVSS 3.1 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Honeywell
Products
Onewireless Network Wireless Device Manager Onewireless Network Wireless Device Manager Firmware