Approved changes feed: RSS · Atom

cpe:2.3:h:honeywell:controledge_plc:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductControledge Plc (43fc8cff-b177-5101-9f4f-899d0c5253bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-30318 not_vulnerable 2026-06-08 05:43:37.940649 Details available
Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of service. The Honeywell ControlEdge PLC and RTU product line exposes an SSH service on port 22/TCP. Login as root to this service is permitted and credentials for the root user are hardcoded without automatically changing them upon first commissioning. The credentials for the SSH service are hardcoded in the firmware. The credentials grant an attacker access to a root shell on the PLC/RTU, allowing for remote code execution, configuration manipulation and denial of service.
Published: 2022-08-31T15:39:14.000Z
Updated: 2024-08-03T06:48:35.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10628 not_vulnerable 2026-06-08 05:16:35.411931 Details available
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.
Published: 2020-06-26T16:06:26.000Z
Updated: 2024-08-04T11:06:10.169Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10624 not_vulnerable 2026-06-08 05:16:35.399804 Details available
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.
Published: 2020-06-26T16:22:46.000Z
Updated: 2024-08-04T11:06:10.188Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.