Approved changes feed: RSS · Atom
cpe:2.3:a:honeywell:hca:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Honeywell (98681534-528d-57d2-bf2a-17f1d63c09c9) |
|---|---|
| Product | Hca (6dcf5374-011d-5584-9a90-9178426b7d93) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3947 |
vulnerable | 2026-06-08 07:23:10.210209 |
Integer underflow during processing of short network packets in CDA FTEB responder
HIGH (8.2)
The Honeywell Experion PKS contains an Integer Underflow
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to
Input Data Manipulation, which could result in improper integer data value checking during subtraction leading to a denial of service.
Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.
Published: 2025-07-10T20:19:13.991Z
Updated: 2025-08-04T19:46:31.982Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3946 |
vulnerable | 2026-06-08 07:23:10.206398 |
Incorrect response generation during FTEB protocol processing
HIGH (8.2)
The Honeywell Experion PKS
and OneWireless WDM
contains a Deployment of Wrong Handler
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to
Input Data Manipulation,
which could result in incorrect handling of packets leading to remote code execution.
Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Published: 2025-07-10T20:16:54.743Z
Updated: 2025-08-04T19:46:15.112Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2523 |
vulnerable | 2026-06-08 07:16:57.300702 |
Lack of buffer clearing before reuse may result in incorrect system behavior.
CRITICAL (9.4)
The Honeywell Experion PKS
and OneWireless WDM
contains an Integer Underflow
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in a failure during subtraction allowing remote code execution.
Honeywell recommends updating to the most recent version of
Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Published: 2025-07-10T20:15:32.600Z
Updated: 2025-08-04T19:45:51.105Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2522 |
vulnerable | 2026-06-08 07:16:57.296431 |
Lack of buffer clearing before reuse may result in incorrect system behavior.
MEDIUM (6.5)
The Honeywell Experion PKS and OneWireless WDM
contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may cause incorrect system behavior.
Honeywell also recommends updating to the most recent version of
Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are
C300, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are 520.1 before
520.2 TCU9 HF1 and 530 before 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Published: 2025-07-10T20:11:43.603Z
Updated: 2025-08-04T19:45:13.439Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2521 |
vulnerable | 2026-06-08 07:16:57.291607 |
Lack of indexes’ validation against buffer borders leads to remote code execution.
HIGH (8.6)
The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to an Overread Buffers, which could result in improper index validation against buffer borders leading to remote code execution.
Honeywell recommends updating to the most recent version of Honeywell Experion PKS:
520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3.The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Published: 2025-07-10T20:08:04.077Z
Updated: 2025-08-04T19:44:27.744Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.