Vendor
Honeywell
133 known vulnerabilities in products by Honeywell, 0 of them actively exploited (CISA KEV).
Key figures
133
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
37
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-3611 | Honeywell IQ4x BMS Controller Missing authentication for critical function | 10.0 | |
| Critical | CVE-2025-2605 | Authenticated command injection | 9.9 | |
| Critical | CVE-2023-3710 | Printer web page invalid command execution | 9.9 | |
| Critical | CVE-2014-9189 | Honeywell Experion PKS: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2014-9186 | Honeywell Experion PKS: PHP Remote File Inclusion | 9.8 | |
| Critical | CVE-2014-9187 | Honeywell Experion PKS: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2014-5435 | Honeywell Experion PKS: Write-what-where Condition | 9.8 | |
| High | CVE-2015-7907 | Honeywell Midas Black Firmware: Path Traversal | 8.6 | |
| Critical | CVE-2020-27297 | OPC UA Tunneller: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2026-13249 | Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040 | 9.8 | |
| High | CVE-2017-14263 | Honeywell Enterprise DVR Firmware: security vulnerability | 8.1 | |
| Critical | CVE-2020-6959 | Honeywell Maxpro VMS & NVR: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2022-30318 | Honeywell Controledge PLC Firmware: Hard-coded Credentials | 9.8 | |
| Critical | CVE-2020-6974 | Honeywell Notifier Web Server (NWS): Path Traversal | 9.8 | |
| High | CVE-2014-5436 | Honeywell Experion PKS: Path Traversal | 7.5 | |
| High | CVE-2017-5143 | Honeywell XL Web II Controller: Path Traversal | 8.6 | |
| Critical | CVE-2017-5139 | Honeywell XL Web II Controller: security vulnerability | 9.8 | |
| Critical | CVE-2017-5140 | Honeywell XL Web II Controller: security vulnerability | 9.8 | |
| High | CVE-2022-30243 | Honeywell Alterton Visual Logic Firmware: security vulnerability | 8.8 | |
| Critical | CVE-2020-27299 | OPC UA Tunneller: Out-of-bounds Read | 9.1 | |
| Critical | CVE-2021-39363 | Honeywell Hbw2per1 Firmware: security vulnerability | 9.8 | |
| High | CVE-2019-18228 | Honeywell equIP series IP cameras: Improper Input Validation | 7.5 | |
| Critical | CVE-2019-18226 | Honeywell H2w2gr1 Firmware: Authentication Bypass by Capture-replay | 9.8 | |
| Critical | CVE-2026-1670 | Honeywell CCTV Products Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2023-51599 | Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability | 7.8 |