CVE-2021-38399: Honeywell Application Control Environment Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to relative path traversal, which may allow an attacker access to unauthorized files and directories.

Affected products

• Honeywell Application Control Environment Firmware: affected versions not specified
• Honeywell c200 Firmware: affected versions not specified
• Honeywell c200e Firmware: affected versions not specified
• Honeywell c300 Firmware: affected versions not specified

Published 2022-10-28. Last modified 2026-06-17.