CVE-2022-43485: Honeywell Onewireless Network Wireless Device Manager Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1

Affected products

• Honeywell Onewireless Network Wireless Device Manager Firmware: before r322.2 (fixed in r322.2)

Published 2023-05-30. Last modified 2026-06-17.