CVE-2022-43485

6.5 mediumEPSS 0.5%

Medium (6.5) in honeywell onewireless network wireless device manager firmware. EPSS 0.5% chance of exploitation in the next 30 days.

Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-330
Published: 2023-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

honeywell:onewireless_network_wireless_device_manager_firmware

References

https://process.honeywell.com/
https://process.honeywell.com/

Check your stack JSON