Honeywell Controledge Virtual Unit Operations Controller Firmware vulnerabilities

2 CVEs affecting Honeywell Controledge Virtual Unit Operations Controller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5390, published 2024-01-31.

More from Honeywell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-5389, published 2024-01-30. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC . This exploit could be used to…
• CVE-2023-5390, published 2024-01-31. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files…