Honeywell Win-Pack Pro vulnerabilities

2 CVEs affecting Honeywell Win-Pack Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-47868, published 2026-01-21.

More from Honeywell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-47868, published 2026-01-21. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the…
• CVE-2021-47866, published 2026-01-21. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the…