Honeywell vulnerabilities
We track 47 vulnerabilities in Honeywell products across 60+ products. 47 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
Latest Honeywell vulnerabilities
- 9.8 Critical severity
PD45 Industrial Printer: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows upload of attacker controlled files without requiring authentication. An attacke
- 8.8 High severity
PD45 Industrial Printer: External Control of File Name or Path
An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows an authenticated user with access to
- 8.1 High severity
Barcode Scanners: Missing Authentication for Critical Functionality
Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x1000) before GK000432BAA, from D1 Base(Ingenic x1600) before HE000085BAA, from A1/
- 10.0 Critical severity
IQ4E: Missing Authentication for Critical Functionality
The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest (level 10
- 9.8 Critical severity
I-HIB2PI-UL 2MP IP: Missing Authentication for Critical Functionality
The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.
- 8.2 High severity
C300 PCNT02: Integer Underflow (Wrap or Wraparound)
The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in improper integer data value c
- 8.2 High severity
C300 PCNT02: Deployment of Wrong Handler
The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in
- 9.4 Critical severity
C300 PCNT02: Integer Underflow (Wrap or Wraparound)
The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result
- 8.6 High severity
C300 PCNT02: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to an Overread Buffers, which could result in improper index val
- 7.5 High severity
C300 PCNT02: Use of Uninitialized Variable
The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing
- 8.8 High severity
MB-Secure: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywel
- 9.4 Critical severity
OneWireless Network Wireless Device Manager: Improper Neutralization of Special Elements used in a Command
Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentia
- 8.8 High severity
Saia PG5 Controls Suite: Improper Limitation of a Pathname to a Restricted Directory
Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is
- 8.8 High severity
Saia PG5 Controls Suite: Improper Limitation of a Pathname to a Restricted Directory
Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to expl
- 8.1 High severity
Experion Server: Heap-based Buffer Overflow
Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 8.1 High severity
Experion Server: Stack-based Buffer Overflow
Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 8.1 High severity
Experion Server: Stack-based Buffer Overflow
Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendatio
- 8.1 High severity
Experion Server: Heap-based Buffer Overflow
Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendation
- 8.1 High severity
Server receiving a malformed message to create a new connection could lead to an attacker…
Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 7.4 High severity
Experion Server: Buffer Access with Incorrect Length Value
Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 8.1 High severity
Experion Server: Stack-based Buffer Overflow
Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 7.4 High severity
Experion Server: Improper Restriction of Operations within the Bounds of a Memory Buffer
Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Secu
- 7.4 High severity
Experion Server: Improper Handling of Length Parameter Inconsistency
Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification f
- 7.5 High severity
C300: Debug Messages Revealing Unnecessary Information
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendation
- 7.5 High severity
Niagara Framework: Uncontrolled Resource Consumption
Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara AX 3.8.1, before Niagara 4.1.
- 7.5 High severity
ControlEdge UOC: Exposed Dangerous Method or Function
An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to write a file that may result in unexpected behavior based on confi
- 7.8 High severity
ProWatch: Incorrect Permission Assignment for Critical Resource
Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) attacker could potentially exploit this vulnerability, leading to a standard user to have arbitrary system code execution.
- 7.8 High severity
PM23/43: Files or Directories Accessible to External Parties
Files or Directories Accessible to External Parties vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Privilege Escalation.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version o
- 8.8 High severity
PM23/43: Session Fixation
Session Fixation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Session Credential Falsification through Prediction.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of th
- 9.8 Critical severity
PM23/43: Improper Neutralization of Special Elements used in a Command
Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to
- 7.5 High severity
C300: Out-of-bounds Write
Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upg
- 7.5 High severity
Experion Server: Generation of Error Message Containing Sensitive Information
Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 7.5 High severity
C300: Deserialization of Untrusted Data
Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 9.8 Critical severity
C300: Insufficient Verification of Data Authenticity
Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 7.5 High severity
Experion Server: Out-of-bounds Write
Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 7.5 High severity
C300: Out-of-bounds Write
Controller DoS due to stack overflow when decoding a message from the server. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 7.5 High severity
Experion Server: Out-of-bounds Write
Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning.
- 9.8 Critical severity
BCM-WEB: Authentication Bypass by Spoofing
** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions. The hash is also a poorly salted MD5 hash, which could result in a successful brute force password attack. Impacted product is BCM-WEB versio
- 7.5 High severity
OneWireless: Missing Authentication for Critical Functionality
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1
- 7.8 High severity
SoftMaster: Uncontrolled Search Path Element
If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.