Honeywell

Records133All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical40CVSS 9.0–10.0

CVSS high59CVSS 7.0–8.9

Exploited now

Honeywell records in CISA KEV

No Honeywell vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Saia Pg5 Controls Suite 9 records MEDIUM C300 Firmware 7 records MEDIUM Experion Process Knowledge System 6 records MEDIUM Direct Station 5 records MEDIUM Engineering Station 5 records MEDIUM Experion Server 5 records MEDIUM Experion Station 5 records MEDIUM Hbw2per1 Firmware 5 records MEDIUM

Records

9 records in Saia Pg5 Controls Suite · all components

TI-2023-28253 CVE-2023-51601 · GHSA-f68w-vghw-39x8

XML external entity injection in Honeywell Saia PG5 Controls Suite

MEDIUM 62

Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00784 Published 2024-05-03 No fix listed CWE-611

TI-2023-28255 CVE-2023-51603 · GHSA-45xr-qrc8-762p

Path traversal in Honeywell Saia PG5 Controls Suite

MEDIUM 43

Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01572 Published 2024-05-03 No fix listed CWE-22

TI-2023-28251 CVE-2023-51599 · GHSA-44j3-q6p8-p422

Path traversal in Honeywell Saia PG5 Controls Suite

MEDIUM 43

Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01572 Published 2024-05-03 No fix listed CWE-22

TI-2022-12554 CVE-2022-30319 · GHSA-vqj4-mpgw-jrqv

Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass.

LOW 38

Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00704 Published 2022-07-28 No fix listed CWE-290

TI-2023-28257 CVE-2023-51605 · GHSA-j3q2-jvch-j544

XML external entity injection in Honeywell Saia PG5 Controls Suite

LOW 30

Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00784 Published 2024-05-03 No fix listed CWE-611

TI-2023-28256 CVE-2023-51604 · GHSA-c433-w259-gc4x

XML external entity injection in Honeywell Saia PG5 Controls Suite

LOW 30

Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00784 Published 2024-05-03 No fix listed CWE-611

TI-2023-28254 CVE-2023-51602 · GHSA-jvmf-fpmj-52r5

XML external entity injection in Honeywell Saia PG5 Controls Suite

LOW 30

Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00784 Published 2024-05-03 No fix listed CWE-611

TI-2023-28252 CVE-2023-51600 · GHSA-58fv-75rm-q8mv

XML external entity injection in Honeywell Saia PG5 Controls Suite

LOW 30

Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00784 Published 2024-05-03 No fix listed CWE-611

TI-2022-12555 CVE-2022-30320 · GHSA-99h8-7hr4-j9f9

Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic…

LOW 20

Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00262 Published 2022-07-28 No fix listed CWE-327

Open these records in search →

Critical	40
High	59
Medium	32
Low	2
No CVSS	0