Skip to content
OpenAdvisories
High ICSA-22-256-02 2 CVEs

Honeywell SoftMaster

Published Sep 13, 2022 · Updated Sep 13, 2022

Vendor: Honeywell Product: SoftMaster

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the application permissions or escalate privileges.

Vulnerabilities 2

  • High 8.8
    CVE-2022-2333 Public exploit

    Honeywell SoftMaster Uncontrolled Search Path Element

    If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.

    Honeywell SoftMaster ICS / OT
  • Medium 6.2
    CVE-2022-2332

    Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource

    A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment.

    Honeywell SoftMaster ICS / OT

Revision history

  1. #1

    Publication Date

References