VULNERABILITY INTELLIGENCE
CVE-2023-6179
CVSS score7.8 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2023-11-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) attacker could potentially exploit this vulnerability, leading to a standard user to have arbitrary system code execution. Honeywell recommends updating to the most recent version of this product, service or offering (Pro-watch 6.0.2, 6.0, 5.5.2,5.0.5).
Weakness classification
- CWE-732: Incorrect Permission Assignment for Critical Resource
Primary references
- psirt@honeywell.com — Product
- psirt@honeywell.com — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Product
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable