Onewireless Network Wireless Device Manager Firmware

onewireless_network_wireless_device_manager_firmware

Vendor: Honeywell • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-4240 1Honeywell 1Onewireless Network Wireless Device Manager Firmware Jun 17, 2026 May 30, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1
CVE-2022-46361 1Honeywell 1Onewireless Network Wireless Device Manager Firmware Jun 17, 2026 May 30, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execu...Show more An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.Show less
CVE-2022-43485 1Honeywell 1Onewireless Network Wireless Device Manager Firmware Jun 17, 2026 May 30, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1