Vulnerability Details CVE-2022-2333
If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.8%
CVSS Severity
CVSS v3 Score 8.8
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-256-02
- https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-13-02_V4-pdf.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-256-02
- https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-13-02_V4-pdf.pdf
Products affected by CVE-2022-2333
-
cpe:2.3:a:honeywell:softmaster:4.51