CVE-2022-2333

CVE-2022-2333 affects Honeywell SoftMaster 4.51. The vulnerability, Uncontrolled Search Path Element, allows code execution when a user is tricked into loading a malicious DLL, executing in the application’s context and permissions. Affected product: SoftMaster desktop application 4.51. Public de...

CVE-2022-2332

CVE-2022-2332 is tied to Honeywell SoftMaster 4.51 with an incorrect permission assignment (CWE-732) that allows a local unprivileged attacker to escalate to administrator privileges. The vulnerability is documented in several sources (NVD, CVE List, CISA/ICS advisories) and is part of a dual-iss...