Honeywell Onewireless Network Wireless Device Manager Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Honeywell Onewireless Network Wireless Device Manager Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-46361 — CVSS 6.9 (medium): An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a…
• CVE-2022-4240 — CVSS 6.5 (medium): Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects…
• CVE-2022-43485 — CVSS 6.2 (medium): Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT…