Description
An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Honeywell | OneWireless | 322.1 – < 322.2 | 322.2 |
Advisories 1
- ICSA-23-075-06 Honeywell OneWireless Wireless Device Manager CISA ICS & IT advisories · Apr 3, 2023