CVE-2025-3946
published 2025-07-10CVE-2025-3946: The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA). An attacker…
PriorityP353high8.2CVSS 3.1
AVNACLPRNUINSUCNILAH
EPSS
0.47%
37.0th percentile
The Honeywell Experion PKS
and OneWireless WDM
contains a Deployment of Wrong Handler
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to
Input Data Manipulation,
which could result in incorrect handling of packets leading to remote code execution.
Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| honeywell | c200e | 520.1 – 520.2 TCU9 | — |
| honeywell | c200e | 530 – 530 TCU3 | — |
| honeywell | c300_pcnt02 | 520.1 – 520.2 TCU9 | — |
| honeywell | c300_pcnt02 | 530 – 530 TCU3 | — |
| honeywell | c300_pcnt05 | 520.1 – 520.2 TCU9 | — |
| honeywell | c300_pcnt05 | 530 – 530 TCU3 | — |
| honeywell | c300pm | 520.1 – 520.2 TCU9 | — |
| honeywell | c300pm | 530 – 530 TCU3 | — |
| honeywell | cn100 | 520.1 – 520.2 TCU9 | — |
| honeywell | cn100 | 530 – 530 TCU3 | — |
| honeywell | fim4 | 520.1 – 520.2 TCU9 | — |
| honeywell | fim4 | 530 – 530 TCU3 | — |
| honeywell | fim8 | 520.1 – 520.2 TCU9 | — |
| honeywell | fim8 | 530 – 530 TCU3 | — |
| honeywell | hca | 520.1 – 520.2 TCU9 | — |
| honeywell | hca | 530 – 530 TCU3 | — |
| honeywell | uoc | 520.1 – 520.2 TCU9 | — |
| honeywell | uoc | 530 – 530 TCU3 | — |
| honeywell | wireless_device_manager | 322.1 – 322.4 | — |
| honeywell | wireless_device_manager | 330.1 – 330.3 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Honeywell OneWireless Wireless Device Manager (WDM)
cisa_ics·2025-09-04·CVSS 8.6
[HIGH] Honeywell OneWireless Wireless Device Manager (WDM)
ICS Advisory
##
Honeywell OneWireless Wireless Device Manager (WDM)
Release DateSeptember 04, 2025
Alert CodeICSA-25-247-01
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Honeywell
- Equipment: OneWireless Wireless Device Manager (WDM)
- Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Sensitive Information in Resource Not Removed Before Reuse, Integer Underflow (Wrap or Wraparound), Deployment of Wrong Handler
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
CISA ICS
Honeywell Experion PKS (Update A)
cisa_ics·2025-09-04·CVSS 7.5
[HIGH] Honeywell Experion PKS (Update A)
ICS Advisory
##
Honeywell Experion PKS (Update A)
Last RevisedSeptember 04, 2025
Alert CodeICSA-25-205-03
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.4
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Honeywell
- Equipment: Experion PKS
- Vulnerabilities: Use of Uninitialized Variable, Improper Restriction of Operations within the Bounds of a Memory Buffer, Sensitive Information in Resource Not Removed Before Reuse, Integer Underflow (Wrap or Wraparound), Deployment of Wrong Handler
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could result in information exposure, denial of service, or remote code execution.
## 3. TECHNICAL
GHSA
GHSA-q4mp-gpc2-ghww: The Honeywell Experion PKS
and OneWireless WDM
contains a Deployment of Wrong Handler
vulnerability
in the component Control Data Access (CDA)
ghsa_unreviewed·2025-07-10
CVE-2025-3946 [HIGH] CWE-430 GHSA-q4mp-gpc2-ghww: The Honeywell Experion PKS
and OneWireless WDM
contains a Deployment of Wrong Handler
vulnerability
in the component Control Data Access (CDA)
The Honeywell Experion PKS
and OneWireless WDM
contains a Deployment of Wrong Handler
vulnerability
in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to
Input Data Manipulation,
which could result in incorrect handling of packets leading to remote code execution.
Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1.
The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-07-10
Published