Vulnerability Description
Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading to a command injection. Honeywell recommends updating to R322.3, R330.2 or the most recent version of this product2.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2023-5878?
CVE-2023-5878 is a documented vulnerability. Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is a...
How severe is CVE-2023-5878?
CVSS scoring is not yet available for CVE-2023-5878. Check NVD for updates.
Is there a patch for CVE-2023-5878?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.