Skip to content
OpenAdvisories
Critical ICSA-25-247-01 4 CVEs

Honeywell OneWireless Wireless Device Manager (WDM)

Published Aug 4, 2025 · Updated Aug 4, 2025

Vendor: Honeywell Product: OneWireless WDM

Summary

Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.

Vulnerabilities 4

  • Critical 9.4
    CVE-2025-2523

    Lack of buffer clearing before reuse may result in incorrect system behavior.

    The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could resul…

    Honeywell FIM8 C300 PCNT02 FIM4 ICS / OT
  • High 8.6
    CVE-2025-2521

    Lack of indexes’ validation against buffer borders leads to remote code execution.

    The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to an Overread Buffers, which could result in improper index va…

    Honeywell C300 PCNT02 FIM4 FIM8 ICS / OT
  • High 8.2
    CVE-2025-3946

    Incorrect response generation during FTEB protocol processing

    The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in…

    Honeywell FIM8 C300 PCNT02 FIM4 ICS / OT
  • Medium 6.5
    CVE-2025-2522

    Lack of buffer clearing before reuse may result in incorrect system behavior.

    The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, whic…

    Honeywell C300 PCNT02 FIM4 FIM8 ICS / OT

Revision history

  1. #1

    Initial Publication

References