Onewireless Network Wireless Device Manager Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:honeywell:onewireless_network_wireless_device_manager_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Honeywell (98681534-528d-57d2-bf2a-17f1d63c09c9) |
|---|---|
| Product | Onewireless Network Wireless Device Manager Firmware (848d6f7d-4445-5a6b-be28-2809d93f5208) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-4240 |
vulnerable | 2026-06-08 05:51:37.028360 |
Unauthenticated API allowing an attacker to obtain the information about network resources
MEDIUM (6.5)
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1
Published: 2023-05-30T16:15:50.508Z
Updated: 2025-01-09T21:27:24.395Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46361 |
vulnerable | 2026-06-08 05:50:38.728392 |
Physical access to the WDM enables use of USB device to gain access to the WDM
MEDIUM (6.9)
An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.
Published: 2023-05-30T16:21:37.079Z
Updated: 2025-01-09T21:26:17.690Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43485 |
vulnerable | 2026-06-08 05:49:32.125454 |
Insecure random number used for generating keys for signing Jwt tokens
MEDIUM (6.2)
Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1
Published: 2023-05-30T16:19:24.146Z
Updated: 2025-01-09T21:27:01.369Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.