Honeywell LENELS2 Netbox vulnerabilities

3 CVEs affecting Honeywell LENELS2 Netbox, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-2422, published 2024-05-30.

More from Honeywell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-2421, published 2024-05-30. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious…
• CVE-2024-2422, published 2024-05-30. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious…
• CVE-2024-2420, published 2024-05-30. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypass authentication…