CVE-2013-0108: Honeywell Comfortpoint Open Manager Station

Medium severity, CVSS 6.8. EPSS: 26.6% chance of exploitation in the next 30 days.

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.

Affected products

• Honeywell Comfortpoint Open Manager Station: version r100 only
• Honeywell Enterprise Buildings Integrator: version r310 only; version r400.2 only; version r410.1 only; version r410.2 only
• Honeywell Symmetre: version r310 only; version r400.2 only; version r410.1 only

Published 2013-02-24. Last modified 2026-06-16.