Lucene search
HistoryMay 30, 2023 - 5:15 p.m.
CVE-2022-4240
honeywell
onewireless
authentication bypass
vulnerability
version 322.1
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7
Confidence
High
EPSS
0.002
Percentile
51.4%
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1
Affected configurations
Node
honeywellonewireless_network_wireless_device_managerMatch-
honeywellonewireless_network_wireless_device_manager_firmwareRange<r322.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| honeywell | onewireless_network_wireless_device_manager | - | cpe:2.3:h:honeywell:onewireless_network_wireless_device_manager:-:*:*:*:*:*:*:* |
| honeywell | onewireless_network_wireless_device_manager_firmware | * | cpe:2.3:o:honeywell:onewireless_network_wireless_device_manager_firmware:*:*:*:*:*:*:*:* |
References
Related
prion
prion
Authentication flaw
2023-05-30 17:15:00
cvelist
cvelist
cve
cve
CVE-2022-4240
2023-05-30 17:15:09
ics
ics
Honeywell OneWireless Wireless Device Manager
2023-03-16 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7
Confidence
High
EPSS
0.002
Percentile
51.4%
Related for NVD:CVE-2022-4240