CVE-2013-0108

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.
References
Link Resource
http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:honeywell:enterprise_buildings_integrator:r400.2:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:enterprise_buildings_integrator:r310:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:enterprise_buildings_integrator:r410.1:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:enterprise_buildings_integrator:r410.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:honeywell:symmetre:r410.1:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:symmetre:r310:*:*:*:*:*:*:*
cpe:2.3:a:honeywell:symmetre:r400.2:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:honeywell:comfortpoint_open_manager_station:r100:*:*:*:*:*:*:*

Information

Published : 2013-02-24 03:48

Updated : 2013-02-24 21:00


NVD link : CVE-2013-0108

Mitre link : CVE-2013-0108


JSON object : View

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

dedicated server usa

Products Affected

honeywell

  • enterprise_buildings_integrator
  • comfortpoint_open_manager_station
  • symmetre