2 lines
2.1 KiB
JSON
2 lines
2.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Control Network Module (CNM)","vendor":"Honeywell International Inc.","versions":[{"lessThanOrEqual":"110.2","status":"affected","version":"100.1","versionType":"cpe"}]}],"source":"psirt@honeywell.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Honeywell Control\nNetwork Module (CNM) contains\ninsertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing\nsystem files, potentially resulting in unintended\naccess to protected data.\n\n\n\nHoneywell\nrecommends updating to the most recent version of this product, service or\noffering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2]."},{"lang":"es","value":"Control de Honeywell\nMódulo de Red (CNM) contiene\ninserción de información sensible en un directorio no deseado. Un atacante podría explotar esta vulnerabilidad mediante el sondeo de archivos del sistema, lo que podría resultar en acceso no deseado a datos protegidos."}],"id":"CVE-2026-5434","lastModified":"2026-10-14T20:10:00.190","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"psirt@honeywell.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5434","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-21T12:06:31.149864Z","version":"2.0.3"}}]},"published":"2026-05-21T09:16:30.410","references":[{"source":"psirt@honeywell.com","url":"https://www.honeywell.com/us/en/product-security"}],"sourceIdentifier":"psirt@honeywell.com","vulnStatus":"Undergoing Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-538"}],"source":"psirt@honeywell.com","type":"Secondary"}]}
|