5 matches found
CVE-2022-30243
Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the...
Code injection
Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the...
PT-2022-20033
Name of the Vulnerable Software and Affected Versions Honeywell Alerton Visual Logic through 2022-05-04 Description The issue allows unauthenticated programming writes from remote users, enabling code to be stored on the controller and run without verification. A malicious user can send a crafted...
Honeywell Alerton Visual Logic 安全漏洞
The Honeywell Alerton Visual Logic is a communication sensor/controller from USAHoneywell. with a built-in humidity sensor and optional wireless capability. A security vulnerability exists in Honeywell Alerton Visual Logic versions 2022-05-04 and earlier, which can be exploited by an attacker to...
CVE-2022-30243: Inclusion of Functionality from Untrusted Control Sphere
Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the...