Vulnerability Details CVE-2022-2333
If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.9%
CVSS Severity
CVSS v3 Score 8.8
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-256-02
- https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-13-02_V4-pdf.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-256-02
- https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-13-02_V4-pdf.pdf
Products affected by CVE-2022-2333
-
cpe:2.3:a:honeywell:softmaster:4.51