Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2023-5878

OneWireless command injection possible when updating firmware

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Honeywell

Description

Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading to a command injection. Honeywell recommends updating to R322.3, R330.2 or the most recent version of this product2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Honeywell OneWireless Network Wireless Device Manager

Default version status: unaffected

  • 310.1 to ≤ 322.2affected
  • 323.1 to ≤ 330.1affected

References