PT-2023-7223 · Honeywell · Honeywell Prowatch

Published 2023-11-17 · Updated 2023-11-25 · CVE-2023-6179

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Honeywell ProWatch versions 4.5 and earlier

Description The issue is related to errors in data processing, which could allow an attacker to execute arbitrary system code. This could potentially lead to a standard user gaining arbitrary system code execution capabilities.

Recommendations For Honeywell ProWatch version 4.5, update to version 5.0.5, 5.5.2, 6.0, or 6.0.2 to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2023-08251

CVE-2023-6179

Affected Products

Honeywell Prowatch

References · 7

• https://bdu.fstec.ru/vul/2023-08251 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6179 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6179 · Vendor Advisory
• https://honeywell.com/us/en/product-security · Note
• https://vuldb.com/ru/?id.245752 · Note
• https://buildings.honeywell.com/us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-notices%20https://honeywell.com/us/en/product-security%20https://nvd.nist.gov/vuln/detail/CVE-2023-6179 · Note
• https://buildings.honeywell.com/us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-notices · Note