Lucene search

HoneywellCVELIST:CVE-2022-46361

HistoryMay 30, 2023 - 4:21 p.m.

CVE-2022-46361 Physical access to the WDM enables use of USB device to gain access to the WDM

2023-05-3016:21:37

CWE-77

Honeywell

www.cve.org

cve-2022-46361

physical access

unauthorized access

usb device

onewireless

security vulnerability

system command

CVSS3

6.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

23.2%

JSON

An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "OneWireless",
    "vendor": "Honeywell",
    "versions": [
      {
        "lessThan": "322.2",
        "status": "affected",
        "version": "322.1",
        "versionType": "patch 322.2"
      }
    ]
  }
]

References

process.honeywell.com/

CVSS3

6.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

23.2%

JSON

Related for CVELIST:CVE-2022-46361