Honeywell Softmaster vulnerabilities

2 CVEs affecting Honeywell Softmaster, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-2333, published 2022-09-16.

More from Honeywell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-2333, published 2022-09-16. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and…
• CVE-2022-2332, published 2022-09-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment.