CVE-2013-0108 An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M)....
MediumCVSS 6.8
EPSS 26.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| honeywell enterprise buildings integrator | = r310 | No fix listed |
| honeywell enterprise buildings integrator | = r400.2 | No fix listed |
| honeywell enterprise buildings integrator | = r410.1 | No fix listed |
| honeywell enterprise buildings integrator | = r410.2 | No fix listed |
| honeywell symmetre | = r310 | No fix listed |
| honeywell symmetre | = r400.2 | No fix listed |
| honeywell symmetre | = r410.1 | No fix listed |
| honeywell comfortpoint open manager station | = r100 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource