CVE Program partner

Honeywell

Honeywell International Inc.

API
CVEs, 365 days964 all time, 1 rejected
Quality96%median 99%
CVSS by the CNA100%share of records
CWE88%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationHoneywell International Inc.
RoleCNA
TypeVendor
Reports toicscert → CISA
ScopeAll Honeywell products.
Advisorieshttps://sps.honeywell.com/us/en/support/productivity/cyber-security-notifications

Latest CVEs · RSS

  • CVE-2026-13248 2026-09-24 · CVSS 8.8
    An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in H
  • CVE-2026-13249 2026-09-24 · CVSS 9.8
    An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F1
  • CVE-2026-17612 2026-07-27 · CVSS 6.9
    Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability t
  • CVE-2026-11804 2026-07-23 · CVSS 5.2
    Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Securi
  • CVE-2026-13742 2026-06-29 · CVSS 5.9
    Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could po
  • CVE-2026-5434 2026-05-21 · CVSS 5.9
    Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability th
  • CVE-2026-5433 2026-05-21 · CVSS 9.1
    Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command d
  • CVE-2026-4272 2026-04-05 · CVSS 8.1
    Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from
  • CVE-2025-12351 2025-10-27 · CVSS 6.8
    Honeywell S35 Series Cameras contains an authorization bypass Vulnerability through User controller key. An attacker could potentially exploit this vulnerabilit
  • CVE-2025-3947 2025-07-10 · CVSS 8.2
    The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit thi
  • CVE-2025-3946 2025-07-10 · CVSS 8.2
    The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA). An atta
  • CVE-2025-2523 2025-07-10 · CVSS 9.4
    The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker coul
  • CVE-2025-2522 2025-07-10 · CVSS 6.5
    The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attack
  • CVE-2025-2521 2025-07-10 · CVSS 8.6
    The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially
  • CVE-2025-2520 2025-07-10 · CVSS 7.5
    The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications. An attacker could potentially exploit t
  • CVE-2025-3945 2025-05-22 · CVSS 7.2
    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise
  • CVE-2025-3944 2025-05-22 · CVSS 7.2
    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File
  • CVE-2025-3943 2025-05-22 · CVSS 4.1
    Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on
  • CVE-2025-3942 2025-05-22 · CVSS 4.3
    Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux
  • CVE-2025-3941 2025-05-22 · CVSS 5.4
    Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows
  • CVE-2025-3940 2025-05-22 · CVSS 5.3
    Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, Q
  • CVE-2025-3939 2025-05-22 · CVSS 5.3
    Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX al
  • CVE-2025-3938 2025-05-22 · CVSS 6.8
    Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows
  • CVE-2025-3937 2025-05-22 · CVSS 7.7
    Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Securi
  • CVE-2025-3936 2025-05-22 · CVSS 6.5
    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allo

All CVE Program partners