Honeywell Symmetre vulnerabilities

2 CVEs affecting Honeywell Symmetre, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0108, published 2013-02-24.

More from Honeywell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-0108, published 2013-02-24. Medium severity, CVSS 6.8. EPSS: 26.6% chance of exploitation in the next 30 days. An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M)…
• CVE-2012-0254, published 2012-09-08. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions (HPS) Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions (HBS)…