Honeywell
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Experion Server | 17 | – | Apr 17, 2024 |
| Saia PG5 Controls Suite | 7 | – | May 3, 2024 |
| C300 PCNT02 | 6 | – | Jul 10, 2025 |
| FIM8 | 6 | – | Jul 10, 2025 |
| FIM4 | 6 | – | Jul 10, 2025 |
| C300 | 6 | – | Apr 17, 2024 |
| UOC | 5 | – | Jul 10, 2025 |
| Direct Station | 5 | – | Jul 13, 2023 |
| C200E | 5 | – | Jul 10, 2025 |
| C300 PCNT05 | 5 | – | Jul 10, 2025 |
| Engineering Station | 5 | – | Jul 13, 2023 |
| C300PM | 5 | – | Jul 10, 2025 |
| HCA | 5 | – | Jul 10, 2025 |
| Experion Station | 5 | – | Jul 13, 2023 |
| CN100 | 5 | – | Jul 10, 2025 |
| Wireless Device Manager | 4 | – | Jul 10, 2025 |
| Experion PKS | 3 | – | Oct 28, 2022 |
| OneWireless | 3 | – | May 30, 2023 |
| PC23/43, PD43 | 3 | – | Sep 12, 2023 |
| PD45, PX240 | 3 | – | Sep 12, 2023 |
| PM23/43 | 3 | – | Sep 12, 2023 |
| PM42 | 3 | – | Sep 12, 2023 |
| PM45 | 3 | – | Sep 12, 2023 |
| PX45/65 | 3 | – | Sep 12, 2023 |
| PX4ie/6ie | 3 | – | Sep 12, 2023 |
| PX940 | 3 | – | Sep 12, 2023 |
| RP2f/RP4f | 3 | – | Sep 12, 2023 |
| SoftMaster | 2 | – | Sep 16, 2022 |
| ControlEdge UOC | 2 | – | Jan 31, 2024 |
| WIN-PACK PRO | 2 | – | Jan 21, 2026 |
| PD45 Industrial Printer | 2 | – | Sep 24, 2026 |
| PC42t, PC42tp, and PC42d (Common Firmware) | 1 | – | Jul 29, 2024 |
| Barcode Scanners | 1 | – | Apr 5, 2026 |
| Classic ENIM | 1 | – | Jul 10, 2025 |
| EHB | 1 | – | Jul 10, 2025 |
| EHPM | 1 | – | Jul 10, 2025 |
| ELMM | 1 | – | Jul 10, 2025 |
| ETN | 1 | – | Jul 10, 2025 |
| I-HIB2PI-UL 2MP IP | 1 | – | Feb 17, 2026 |
| INNCOM INNControl 3 | 1 | – | Feb 20, 2020 |
| IQ3 | 1 | – | Mar 12, 2026 |
| IQ412 | 1 | – | Mar 12, 2026 |
| IQ41x | 1 | – | Mar 12, 2026 |
| IQ422 | 1 | – | Mar 12, 2026 |
| IQ4E | 1 | – | Mar 12, 2026 |
| IQ4NC | 1 | – | Mar 12, 2026 |
| IQECO | 1 | – | Mar 12, 2026 |
| MB-Secure | 1 | – | May 2, 2025 |
| MPA2 Access Panel | 1 | – | Feb 29, 2024 |
| Niagara Framework | 1 | – | Feb 13, 2024 |
| Notifier Web Server (NWS) Version 3.50 and earlier | 1 | – | Mar 24, 2020 |
| OneWireless Network Wireless Device Manager | 1 | – | Feb 6, 2025 |
| 25M IPC | 1 | – | Feb 17, 2026 |
| PGM | 1 | – | Jul 10, 2025 |
| ProWatch | 1 | – | Nov 17, 2023 |
| PTZ WDR 2MP 32M | 1 | – | Feb 17, 2026 |
| RFIM | 1 | – | Jul 10, 2025 |
| S35 3M/5M/8M/Pinhole/Kit Camera | 1 | – | Oct 27, 2025 |
| S35 AI Fisheye&Dual Sensor/Micro Dome/Full Color Eyeball&Bullet Camera | 1 | – | Oct 27, 2025 |
| S35 Series 3M/5M/8M/PinHole Cameras | 1 | – | Jul 27, 2026 |
| S35 Thermal Camera | 1 | – | Oct 27, 2025 |
| SMB NDAA MVO-3 | 1 | – | Feb 17, 2026 |
Exploited and recent CVEs
- CVE-2026-13248 Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface 0.4%
- CVE-2026-13249 Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040 0.9%
- CVE-2026-17612 Audit Log Exposure through Unauthorized Access 0.5%
- CVE-2026-4272 CVE-2026-4272 - Bluetooth Remote Execution of System Commands Vulnerability 0.7%
- CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function 5.7%
- CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function 5.7%
- CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function 5.7%
- CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function 5.7%
- CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function 5.7%
- CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function 5.7%
- CVE-2026-3611 Honeywell IQ4x BMS Controller Missing authentication for critical function 5.7%
- CVE-2026-1670 Honeywell CCTV Products Missing Authentication for Critical Function 0.8%
- CVE-2026-1670 Honeywell CCTV Products Missing Authentication for Critical Function 0.8%
- CVE-2026-1670 Honeywell CCTV Products Missing Authentication for Critical Function 0.8%
- CVE-2026-1670 Honeywell CCTV Products Missing Authentication for Critical Function 0.8%
- CVE-2021-47868 WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path 0.2%
- CVE-2021-47866 WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path 0.2%
- CVE-2025-12351 Inadequate access control measure allows unauthorized users to access restricted administrative functions 0.2%
- CVE-2025-12351 Inadequate access control measure allows unauthorized users to access restricted administrative functions 0.2%
- CVE-2025-12351 Inadequate access control measure allows unauthorized users to access restricted administrative functions 0.2%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3947 Integer underflow during processing of short network packets in CDA FTEB responder 0.4%
- CVE-2025-3946 Incorrect response generation during FTEB protocol processing 0.6%