CVE-2022-30245

CVE-2022-30245 affects Honeywell Alerton Compass Software 1.6.5. The flaw allows unauthenticated configuration changes from remote users, enabling a crafted packet to alter the controller’s configuration. The changed configuration may not be reflected in the User Interface, creating an inconsiste...

CVE-2022-30245: Externally Controlled Reference to a Resource in Another Sphere

Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller configuration without the...

PT-2022-20035

Name of the Vulnerable Software and Affected Versions Honeywell Alerton Compass Software version 1.6.5 Description The issue allows unauthenticated configuration changes from remote users, enabling configuration data to be stored on the controller and then implemented. A user with malicious inten...