2 lines
2.1 KiB
JSON
2 lines
2.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Control Network Module (CNM)","vendor":"Honeywell International Inc.","versions":[{"lessThanOrEqual":"110.2","status":"affected","version":"100.1","versionType":"cpe"}]}],"source":"psirt@honeywell.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Honeywell Control\nNetwork Module (CNM) contains command injection vulnerability\nin the web interface. An attacker could exploit this vulnerability via command\ndelimiters, potentially resulting in Remote Code Execution (RCE). \n\n\n\nHoneywell\nrecommends updating to the most recent version of this product, service or\noffering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2]."},{"lang":"es","value":"El Módulo de Red de Control (CNM) de Honeywell contiene una vulnerabilidad de inyección de comandos en la interfaz web. Un atacante podría explotar esta vulnerabilidad mediante delimitadores de comandos, lo que podría resultar en Ejecución Remota de Código (RCE)."}],"id":"CVE-2026-5433","lastModified":"2026-10-14T20:10:00.190","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.3,"impactScore":6.0,"source":"psirt@honeywell.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5433","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-21T12:38:39.246019Z","version":"2.0.3"}}]},"published":"2026-05-21T09:16:30.270","references":[{"source":"psirt@honeywell.com","url":"https://www.honeywell.com/us/en/product-security"}],"sourceIdentifier":"psirt@honeywell.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|