PT-2025-29162 · Honeywell · Experion Pks+1

Positive Technologies · Published 2025-04-25 · Updated 2025-07-11 · CVE-2025-3946

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS versions 520.1 through 520.2 TCU9 Honeywell Experion PKS versions 530 through 530 TCU3 Honeywell OneWireless WDM versions 322.1 through 322.4 Honeywell OneWireless WDM versions 330.1 through 330.3

Description: The software contains a Deployment of Wrong Handler vulnerability in the Control Data Access (CDA) component. An attacker could potentially exploit this issue, leading to Input Data Manipulation, which could result in incorrect handling of packets and remote code execution.

Recommendations: Honeywell Experion PKS versions 520.1 through 520.2 TCU9: Update to Honeywell Experion PKS 520.2 TCU9 HF1. Honeywell Experion PKS versions 530 through 530 TCU3: Update to Honeywell Experion PKS 530.1 TCU3 HF1. Honeywell OneWireless WDM versions 322.1 through 322.4: Update to OneWireless 322.5. Honeywell OneWireless WDM versions 330.1 through 330.3: Update to OneWireless 331.1.

Fix

Weakness Enumeration

CWE-430

Related Identifiers

BDU:2025-06923

CVE-2025-3946

Affected Products

Experion Pks

Onewireless Wdm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-3946 · Security Note
• https://bdu.fstec.ru/vul/2025-06923 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-205-03 · Note
• https://twitter.com/CVEnew/status/1943668186614014170 · Twitter Post
• https://process.honeywell.com · Note