GCVE - cpe:2.3:o:honeywell:c200_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:honeywell:c200_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Honeywell (`98681534-528d-57d2-bf2a-17f1d63c09c9`)
Product	C200 Firmware (`f313f809-1836-577e-a461-8ecc25d1c0bd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-38399`	vulnerable	2026-06-08 05:32:56.020798	Honeywell Experion PKS and ACE Controllers Relative Path Traversal HIGH (7.5) Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories. Published: 2022-10-28T01:19:02.691Z Updated: 2025-04-16T16:07:59.274Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04 https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38397`	vulnerable	2026-06-08 05:32:56.016491	Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type CRITICAL (10) Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. Published: 2022-10-28T01:21:35.576Z Updated: 2025-04-16T16:07:44.758Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04 https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38395`	vulnerable	2026-06-08 05:32:56.010298	Honeywell Experion PKS and ACE Controllers Injection CRITICAL (9.1) Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. Published: 2022-10-28T01:20:24.175Z Updated: 2025-04-16T16:07:52.218Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-21-278-04 https://www.honeywellprocess.com/library/support/notifications/Customer/SN2021-02-22-01-Experion-C300-CCL.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.