CVE-2012-0254

ALTO 7.5CVE-2012-0254 · Published 08/09/2012 · updated 16/06/2026

In breve

CVE-2012-0254 è una vulnerabilità ALTO (CVSS 7.5) che riguarda enterprise building manager (honeywell), experion (honeywell), symmetre (honeywell).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.1%, superiore al 90.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
enterprise building manager honeywell	`= r400= r410.1`	No fix yet
experion honeywell	`= r200= r300= r310= r400.0`	No fix yet
symmetre honeywell	`= r410.1`	No fix yet

Description

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS) Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls (ECC) SymmetrE R410.1 allows remote attackers to execute arbitrary code via unspecified vectors.

References

us-cert.gov/control_systems/pdf/ICSA-12-150-01.pdf · Third Party Advisory
honeywellprocess.com/en-US/support/pages/all-notifications.aspx · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free