Skip to main content

Symmetre

2 CVEs product

Monthly

CVE-2013-0108 Feb 24, 11:48 MEDIUM POC THREAT This Month

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 61.4%.

RCE Code Injection Honeywell Symmetre Enterprise Buildings Integrator +1
NVD Exploit-DB
CVSS 2.0
6.8
EPSS
61.4%
Threat
4.7
CVE-2012-0254 Sep 08, 10:28 HIGH This Week

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Honeywell Enterprise Building Manager +2
NVD
CVSS 2.0
7.5
EPSS
2.6%
EPSS 61% 4.7 CVSS 6.8
MEDIUM POC THREAT This Month

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 61.4%.

RCE Code Injection Honeywell +3
NVD Exploit-DB
EPSS 3% CVSS 7.5
HIGH This Week

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy