Honeywell Controledge Plc Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Honeywell Controledge Plc Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-30318 — CVSS 9.8 (critical): Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded…
• CVE-2020-10624 — CVSS 7.5 (high): ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network.
• CVE-2020-10628 — CVSS 7.5 (high): ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network.