PT-2022-20034

Name of the Vulnerable Software and Affected Versions Honeywell Alerton Ascent Control Module ACM through 2022-05-04 Description The issue allows unauthenticated programming writes from remote users, enabling code to be stored on the controller and run without verification. A malicious user can...

PT-2022-20032

Name of the Vulnerable Software and Affected Versions Honeywell Alerton Ascent Control Module ACM versions prior to 2022-05-04 Description The issue allows unauthenticated configuration changes from remote users, enabling configuration data to be stored on the controller and then implemented. A...

CVE-2022-30244: Inclusion of Functionality from Untrusted Control Sphere

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program...

CVE-2022-30242: Undefined Security Weakness

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller...