CVE-2022-46361: Honeywell Onewireless Network Wireless Device Manager Firmware
Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.
An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to 322.1 and fixed in version 322.2.
Affected products
- Honeywell Onewireless Network Wireless Device Manager Firmware: before r322.2 (fixed in r322.2)
Published 2023-05-30. Last modified 2026-06-17.