Honeywell vulnerabilities
We track 47 vulnerabilities in Honeywell products across 60+ products. 47 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.
Latest Honeywell vulnerabilities
- 9.8 Critical severity
Controledge Plc Firmware: Use of Hard-coded Credentials
Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, mani
- 9.1 Critical severity
Experion Lx Firmware: Missing Authentication for Critical Functionality
Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0055, there is a Honeywell Experion LX Control Data Access (CDA) EpicMo protocol with unauthenticated functionality issue. The affected componen
- 8.1 High severity
Saia Pg5 Controls Suite: Authentication Bypass by Spoofing
Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls (SBC) PCD S-Bus authentication bypass issue. The affected components are characterized as: S-Bus (5050/UDP) authentic
- 9.8 Critical severity
Safety Manager Firmware: Insufficient Verification of Data Authenticity
Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticity. According to FSCT-2022-0053, there is a Honeywell Experion PKS Safety Manager insufficient logic security controls issue. The affected com
- 7.5 High severity
Safety Manager Firmware: Missing Authentication for Critical Functionality
Honeywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a Critical Function. According to FSCT-2022-0051, there is a Honeywell Experion PKS Safety Manager multiple proprietary protocols with unauthenticated functionality issue.
- 8.0 High severity
Alerton Ascent Control Module Firmware: Inclusion of Functionality from Untrusted Control Sphere
Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted pac
- 8.8 High severity
Alterton Visual Logic Firmware: Inclusion of Functionality from Untrusted Control Sphere
Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change