Medium · 6.5 CVE-2022-4240 EUVD-2022-51598GHSA-rw3q-fv8q-c2xf

Unauthenticated API allowing an attacker to obtain the information about network resources

Published May 30, 2023 · Updated Jan 9, 2025 · Assigned by Honeywell

Vendor: Honeywell Product: OneWireless Category: ICS / OT

Description

Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1

Affected products

Vendor	Product	Affected	Fixed
Honeywell	OneWireless	322.1	—

Advisories 1

ICSA-23-075-06 Honeywell OneWireless Wireless Device Manager CISA ICS & IT advisories · Apr 3, 2023

References

https://process.honeywell.com/

CNA	v3.1	6.5
EUVD	v3.1	6.5