Lucene search

[email protected]CVE-2012-0254

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-0254

2022-10-0316:15:39

CWE-787

[email protected]

web.nvd.nist.gov

cve-2012-0254

hmiweb browser

hscdsprenderdll

activex control

honeywell

process solutions

hps

experion

honeywell building solutions

hbs

enterprise building manager

honeywell environmental combustion and controls

ecc

symmetre

remote code execution

buffer overflow

security vulnerability.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

JSON

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD

Node

honeywellenterprise_building_managerMatchr400

honeywellenterprise_building_managerMatchr410.1

honeywellexperionMatchr200

honeywellexperionMatchr300

honeywellexperionMatchr310

honeywellexperionMatchr400.0

honeywellsymmetreMatchr410.1

CPENameOperatorVersion
honeywell:enterprise_building_managerhoneywell enterprise building managereqr400
honeywell:enterprise_building_managerhoneywell enterprise building managereqr410.1
honeywell:experionhoneywell experioneqr200
honeywell:experionhoneywell experioneqr300
honeywell:experionhoneywell experioneqr310
honeywell:experionhoneywell experioneqr400.0
honeywell:symmetrehoneywell symmetreeqr410.1

CPE	Name	Operator	Version
honeywell:enterprise_building_manager	honeywell enterprise building manager	eq	r400
honeywell:enterprise_building_manager	honeywell enterprise building manager	eq	r410.1
honeywell:experion	honeywell experion	eq	r200
honeywell:experion	honeywell experion	eq	r300
honeywell:experion	honeywell experion	eq	r310
honeywell:experion	honeywell experion	eq	r400.0
honeywell:symmetre	honeywell symmetre	eq	r410.1