VULNERABILITY INTELLIGENCE
CVE-2023-5878
EPSS probability0.97%
CISA KEVNot currently listed
Published2025-02-06
Last modified2026-06-17
Description
Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading to a command injection. Honeywell recommends updating to R322.3, R330.2 or the most recent version of this product2.
Weakness classification
- psirt@honeywell.com: CWE-77