CVEvulnerability

CVE-2013-0108

6.8 MEDIUM Published 2013-02-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.

Affected configurations

• honeywell enterprise buildings integrator r310 • honeywell enterprise buildings integrator r400.2 • honeywell enterprise buildings integrator r410.1 • honeywell enterprise buildings integrator r410.2 • honeywell symmetre r310 • honeywell symmetre r400.2 • honeywell symmetre r410.1 • honeywell comfortpoint open manager station r100

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References