CVE-2025-2522
published 2025-07-10CVE-2025-2522: The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker…
PriorityP336medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.23%
13.9th percentile
The Honeywell Experion PKS and OneWireless WDM
contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may cause incorrect system behavior.
Honeywell also recommends updating to the most recent version of
Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are
C300, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are 520.1 before
520.2 TCU9 HF1 and 530 before 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| honeywell | c200e | 520.1 – 520.2 TCU9 | — |
| honeywell | c200e | 530 – 530 TCU3 | — |
| honeywell | c300_pcnt02 | 520.1 – 520.2 TCU9 | — |
| honeywell | c300_pcnt02 | 530 – 530 TCU3 | — |
| honeywell | c300_pcnt05 | 520.1 – 520.2 TCU9 | — |
| honeywell | c300_pcnt05 | 530 – 530 TCU3 | — |
| honeywell | c300pm | 520.1 – 520.2 TCU9 | — |
| honeywell | c300pm | 530 – 530 TCU3 | — |
| honeywell | cn100 | 520.1 – 520.2 TCU9 | — |
| honeywell | cn100 | 530 – 530 TCU3 | — |
| honeywell | fim4 | 520.1 – 520.2 TCU9 | — |
| honeywell | fim4 | 530 – 530 TCU3 | — |
| honeywell | fim8 | 520.1 – 520.2 TCU9 | — |
| honeywell | fim8 | 530 – 530 TCU3 | — |
| honeywell | hca | 520.1 – 520.2 TCU9 | — |
| honeywell | hca | 530 – 530 TCU3 | — |
| honeywell | uoc | 520.1 – 520.2 TCU9 | — |
| honeywell | uoc | 530 – 530 TCU3 | — |
| honeywell | wireless_device_manager | 322.1 – 322.4 | — |
| honeywell | wireless_device_manager | 330.1 – 330.3 | — |
| msrc | cbl2_vim_9.0.0325-1_on_cbl_mariner_2.0 | — | — |
| msrc | cm1_vim_9.0.0181-1_on_cbl_mariner_1.0 | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Honeywell OneWireless Wireless Device Manager (WDM)
cisa_ics·2025-09-04·CVSS 8.6
[HIGH] Honeywell OneWireless Wireless Device Manager (WDM)
ICS Advisory
##
Honeywell OneWireless Wireless Device Manager (WDM)
Release DateSeptember 04, 2025
Alert CodeICSA-25-247-01
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Honeywell
- Equipment: OneWireless Wireless Device Manager (WDM)
- Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Sensitive Information in Resource Not Removed Before Reuse, Integer Underflow (Wrap or Wraparound), Deployment of Wrong Handler
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
CISA ICS
Honeywell Experion PKS (Update A)
cisa_ics·2025-09-04·CVSS 7.5
[HIGH] Honeywell Experion PKS (Update A)
ICS Advisory
##
Honeywell Experion PKS (Update A)
Last RevisedSeptember 04, 2025
Alert CodeICSA-25-205-03
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.4
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Honeywell
- Equipment: Experion PKS
- Vulnerabilities: Use of Uninitialized Variable, Improper Restriction of Operations within the Bounds of a Memory Buffer, Sensitive Information in Resource Not Removed Before Reuse, Integer Underflow (Wrap or Wraparound), Deployment of Wrong Handler
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
## 3. TECHNICAL
Microsoft
Heap-based Buffer Overflow in vim/vim
vendor_msrc·2022-07-12·CVSS 7.8
CVE-2022-2522 [HIGH] CWE-122 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in vim/vim
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
@huntrdev: @huntrdev
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft
GHSA
GHSA-3pc5-rvw8-v64m: The Honeywell Experion PKS and OneWireless WDM
contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA)
ghsa_unreviewed·2025-07-10
CVE-2025-2522 [MEDIUM] CWE-226 GHSA-3pc5-rvw8-v64m: The Honeywell Experion PKS and OneWireless WDM
contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA)
The Honeywell Experion PKS and OneWireless WDM
contains Sensitive Information in Resource vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may cause incorrect system behavior.
Honeywell also recommends updating to the most recent version of
Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are
C300, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are 520.1 before
520.2 TCU9 HF1 and 530 before 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-07-10
Published