Honeywell vulnerabilities
73 published CVEs name Honeywell among the affected products.
- Published CVEs
- 73
- Last 12 months
- 8
- Critical
- 20
- Known exploited
- 0
Critical 20High 30Medium 22Low 1Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20196
- 20202
- 20225
- 202316
- 202426
- 20259
- 20268
Newest CVEs
- CVE-2026-13248
Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface
Honeywell · PD45 Industrial Printer
High8.8 - CVE-2026-13249
Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040
Honeywell · PD45 Industrial Printer
Critical9.8 - CVE-2026-17612
Audit Log Exposure through Unauthorized Access
Honeywell · S35 Series 3M/5M/8M/PinHole Cameras
Medium6.9 - CVE-2026-4272
CVE-2026-4272 - Bluetooth Remote Execution of System Commands Vulnerability
Honeywell · Barcode Scanners
High8.1 - CVE-2026-3611
Honeywell IQ4x BMS Controller Missing authentication for critical function
Honeywell · IQ4E
Critical10.0 - CVE-2026-1670
Honeywell CCTV Products Missing Authentication for Critical Function
Honeywell · I-HIB2PI-UL 2MP IP
Critical9.3 - CVE-2021-47868
WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service Path
Honeywell · WIN-PACK PRO
High8.5 - CVE-2021-47866
WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path
Honeywell · WIN-PACK PRO
High8.5 - CVE-2025-12351
Inadequate access control measure allows unauthorized users to access restricted administrative functions
Honeywell · S35 3M/5M/8M/Pinhole/Kit Camera
Medium6.8 - CVE-2025-3947
Integer underflow during processing of short network packets in CDA FTEB responder
Honeywell · C300 PCNT02
High8.2
Products with the most CVEs
Most common weaknesses
- CWE-787 Out-of-bounds write9
- CWE-306 Missing authentication for a critical function6
- CWE-121 Stack-based buffer overflow5
- CWE-22 Path traversal5
- CWE-611 XML external entity (XXE)5
- CWE-119 Memory buffer bounds error4
- CWE-122 Heap-based buffer overflow4
- CWE-78 OS command injection4
- CWE-20 Improper input validation3
- CWE-434 Unrestricted file upload3