发布日期：2025-02-06
更新日期：2025-05-29

受影响系统：

Honeywell Honeywell OneWireless Wireless Device Manager R330.1
Honeywell Honeywell OneWireless Wireless Device Manager R323.x
Honeywell Honeywell OneWireless Wireless Device Manager R322.2
Honeywell Honeywell OneWireless Wireless Device Manager R322.1
Honeywell Honeywell OneWireless Wireless Device Manager R321.x
Honeywell Honeywell OneWireless Wireless Device Manager R320.x
Honeywell Honeywell OneWireless Wireless Device Manager R310.x

描述：

---

CVE(CAN) ID: CVE-2023-5878

Honeywell OneWireless Wireless Device Manager（Honeywell OneWireless WDM）是美国霍尼韦尔（Honeywell）公司的一个无线设备管理器。
Honeywell OneWireless Wireless Device Manager R310.x，R320.x，R321.x，R322.1，R322.2，R323.x和R330.1版本存在远程代码执行漏洞，经过身份验证的攻击者可能会利用固件更新过程来利用该漏洞，从而导致命令注入。

<**>

建议：

---

厂商补丁：

Honeywell
---------
厂商尚未提供漏洞修复方案，请关注厂商主页更新：
https://process.honeywell.com/

浏览次数：89
严重程度：0（网友投票）